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(54) MOBILE ELECTRONIC COMMERCE SYSTEM 

(57) The objective of the present invention is to pro- 
vide a mobile electronic commerce system that is supe- 
rior in safety and usability. The mobile electronic 
commerce system connprises an electronic wallet 100, 
supply sides 101, 102, 103, 104 and 105, and a service 
providing means 110 that is connected by communica- 
tion means. The service providing means installs a pro- 
gram for an electronic ticket, an electronic payment 
card, or an electronic telephone card. The electronic 
wallet employs the installed card to obtain a product or 

FIG. 1 


a service or entrance permission. The settlement proc- 
ess is performed by the electronic wallet arxl the supply 
side via the communication means, and data obtained 
during the settlement process are managed by being 
transmitted to the service providing means at a specific 
time. A negotiable card can be easily obtained, and 
when the negotiable card is used the settlement proc- 
ess can be quickly and precisely performed. 
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Description 

FIELD OF THE INVENTION 

[0001] The present ins^ention relates to an electronic . s 
commerce system that provides a settlement function 
for retail sates transactions involving the use of payment 
cards or credit cards (bank cards), a settlement function 
that provides for the employment of telephone cards for 
paying communication fees incurred through the use of io 
nfxsblle telephones, an examination function for verifying 
tickets issued for admission to vark)us events, including 
concerts and movies, and a sales and distrftxition func- 
tion for these payment cards, telephone cards and tick- 
ets. In particiiar. the present inv&ition pertains to the is 
maintenance of the usability and the safety of settle- 
ments, and to the facilitation of effident and smooth 
business transactions. 

BACKGROUND OF THE INVENTION 20 

[0002] As the employment of telephone cards and 
payment cards, such as pinbali game prepaid cards, 
has spread, prepaid systems for v^tch magnetic cards 
are used to settle debts have become common. How- 2s 
ever, since there has been a oonresponding inaease in 
attendant problems, such as the illegal use of altered 
cards and excess charges imposed by retail shops, 
there is a demand that the safety of settlement systems 
be Improved. Recerrtly. an IC payment card has 30 
appeared that provides one countermeasure to illegal 
applications. 

[0003] An explanatfon will now be given for the organ- 
ization of a prepaid settlement system errploying a con- 
ventional, general payment card. as 
[0004] In Fig. 1 38A is shown the organization of a pre- 
paid settlement system using a converrtional. comnfK}n 
payment card. 

[0005] In Fig. 138A, a payment card terminal 13801 Is 
installed in a retail store 13806 and is used in the store 40 
for settlements for which payment cards are used. The 
payment card terminal 13801 is connected aaoss a 
communication line 13804 to a central system 13802 
operated by a payment card issuer 13807. At some 
stores, payment card terminals 13801 are connected 4S 
via a POS system at the store and the communication 
line 13804 to the central system 13802 operated by a 
payment card issuer 13807. 

[0006] To use a payment card to purchase a product 
at the retail store 13806, first, a consumer 13805 pays so 
cash at the payment card store 13803, whereat pay- 
ment cards are sold (13808), and purchases a payment 
card 1800 (13809). The sale of the payment card at tNs 
time is transmitted from the payment card store 13803 
to the payment card issuer 13807 (13810). 55 
[0007] Then, the consumer 1 3805 hands the payment 
card 13800 to a clerk at the retail store 13806 (13811) 
and requests that the payment card be used when 


processing the settlement. 

[0008] Thereafter, the clerk inserts the paymerrt card 

1 3800 into the card reader of the payment card terminal 

13801 and initiates the payment card settlement 
processing. In consequence, the payment card terminal 
13801 reads current balance infomnation from the pay- 
ment card 138CX}. subtracts the price of the product from 
the available balance, and writes new balance informa- 
tfon to the payment card. The payment card terminal 
13801 also uses a printer to output a statement of 
account in which the price and the new payment card 
balance are specified. 

[0009] The derk hards the consumer 1 3805 the prod- 
uct, the payment card and the statement of account 
(13813 and 13812), and thus terminates the settlement 
processing using the payment card. 
[0010] Following this, the payment card 13801 trans- 
mits the amount of the payment that v/as subtracted 
from the balance on the payment card 13800 across the 
oomnxinication line 13804 to the central system 13802 
of the payment card issuer 13807 (13814). In response, 
the payment card Issuer 13807 performs a transactfon 
to transfer money to the retail store 13806 (13815). 
[0011] A payment card may be purchased from an 
automatic vending machine that is set up to sell pay- 
ment cards. Further, the same basic arrangement is 
employed for a payment card terminal 1380 that is con- 
stituted by an automatic vending machine and a public 
telephone that has a settlement function for which a 
payment card is used. 

[0012] In addition, as is disclosed in Japanese Exam- 
ined Paterrt Publication No. Hei 6-103426, a system is 
proposed wtierein a payment card and a card 
readerAwriter authenticate each other by empfoying a 
digital signature as a safety countermeasure. 
[0013] Now. conskler the sale and use of tickets for 
various events, including concerts and niovies. for 
which prepaid settlement processing is performed in 
addition to that performed by using a payment card. The 
tk:kets are sold on line, while when presented, they are 
visually examined by ushers. 
[0014] In Fig. 138B is shown the arrangement of a 
conventional, common ticket vending system. 
[0015] In Fig. 138B. for ticket sales a ticket vending 
terminal 13817 is installed in a ticket retail store 13820. 
The ticket vending terminal 13817 is connected via a 
communication line 13819 to a central system 13818 for 
a ticket issuer 13821. 

[0016] To purchase a ticket for an event, a concert or 
a movie, first, the consumer 13805 calls the central sys- 
tem 13818 of the ticket issuer 13821 and makes a res- 
ervation for a desired ticket (13824). The center system 
13818 reserves the ticket applied for, and issues a res- 
ervation nuTvber to the consumer 13805 (13825). 
[0017] After the reservation number is received, at a 
ticket retail store 13820 the consumer 13805 gives a 
derk the number and asks that a ticket be Issued. 
[001 8] To issue the ticket the clerk inputs the reserva- 


2 


3 

tion number at the ticket vending terminal 13817. The 
ticket vending terminal 13817 transmits the reservation 
number to the central system 13818 of the ticket issuer 
13821 (13827) via the comnunlcation line 13819. In 
response, the center system 13818 transmits the ticket 5 
information for the reserved ticket to the ticket vending 
temiinal 13817(13828). 

[(N)19] Subsequently, the ticket vending tenninat 
1381 7 prints the received ticket information on a specific 
pasteboard blank designated by the ticket issuer 13821, 10 
and outputs the result as a ticket 13816. The clerk then 
delivers the ticket 13816 to the consumer 13805 
(13830) in exchange for cash (13829) and the tk:ket 
vending process is terminated. 

[0020] Then, folkjwing the subtraction of its commis- 15 
s\on, the ticket retail store 13820 transmits a record of 
the receipts for the sale of the ticket to the ticket issuer 
13821 , which, in turn, subtracts its commission from the 
record of receipts and transmits the result to the promo- 
tor of the event for which the ticket was sold (1 3834). 20 
[0021 ] Later, the consumer 13805 presents the tk:ket 
13816 to an usho- 13822 at an event hall 13823 
(13832). and after the usher 13822 visually examines 
the contents of the ticket and determines that all entries 
are correct, the cor^mer 13805 is pemiitted to enter, ss 
[0022] Since according to the prepaid settlement sys- 
tem for which a conventional payment card Is employed 
the settlement process is primarily performed by a retail 
store, rt is possible for a retail store to cheat a consumer 
when performing the settlement process by charging a 30 
higher than authorized price for a product. 
[0023] In addition, in the conventional settlement sys- 
tem it is possible for a retail store to so alter a payment 
card terminal that the price charged during a settlement 
process is higher than is that which is displayed on a 3S 
cash register or is printed on the statement of account. 
[0024] Furthermore, since fc>asically, in a conventional 
settlement system, the balance information held by a 
payment card is rewritten by the payment card terminal, 
the retail store may modify the payment card temiinal so 40 
that the central system is charged a higher price than 
that whk^ is actually subtracted from the balance 
recorded on the payment card. 
[0025] Also, since in a conventional settlement system 
a payment card is foaded directly into a payment card 46 
terminal installed In a store, the retail store could modify 
the payment card terminal so that it alters the informa- 
tion stored on the card, or so that it illegally reads per- 
sonal information other than that required for a 
settlement 50 
[0026] In order to prevent such an Illegal modification 
of a payment card terminal, a physical countermeasure 
is required, such as the sealing of the terminal to pre- 
vent its disassembly, and this has constituted a barrier 
to a reduction in the size of a payment card terminal and 55 
to a reduction in the manufacturing costs. 
[0027] r^oreover, for a conventional settlement sys- 
tem, the capacity of the memory provided on a payment 


4 

card is limited, and a consumer can not directly confirm 
an amoum that has been sufcjtracted from the payment 
card. Therefore, when a settlemem Is processed, a 
retail shop must deliver to a consumer a statement on 
which the price of a product and the remaining payment 
card t>alance is specified. This rec^irement constitutes 
a barrier to sales efficiency and to resource conserva- 
tion. 

[0028] According to a conventional tk:ket vending sys- 
tem, when buying a ticket a consumer must visit a ticket 
retail stae. and this is inconvenient. 
[0029] Also, as established by a conventional ticket 
vending system, the validation of a ticket is effected by 
examining the ticket visually, and such a process is not 
or^y inaccurate and inadequate but can be a contribut- 
ing factor to the commission of an illegal act, such as 
the use of a counterfeit ticket. 
[0030] Furthermore, according to the conventfonal 
ticket vending system, when a concert, for exanple, is 
canceled after a ticket is issued, to receive a refund the 
consumer must return to the ticket retail store, an addi- 
tional inconvenient requirement. 
[0031] And then, in accordance with a conventfonal 
settlement system and a conventional ticket vending 
system, when a consumer wishes to transfer to a friend, 
etc., a payment card or a ticket that has been pur- 
chased, the article must be physically delivered or 
mailed to the intended recipient which constitutes one 
more inconvenience. 

DISCLOSURE OF THE INVENTION 

[0032] To resolve the above shortcomings of the con- 
ventfonal settlement system, it is one abjective of the 
present invention to provide a mobile electronic com- 
merce system that provides superior safety and usabil- 
rty. 

[0033] According to the present invention, in a mobile 
electronic commerce system for paying, via wireless 
oomrrujnication means, a required amount using an 
electronic wallet that includes wireless communication 
means, and for receiving, from a supply side, a product 
or a service, or a required permission, service means is 
provided for connecting the electronic wallet and the 
supply side via the communication means. The service 
means installs in the electronic wallet, via the communi- 
cation means, a program for an electronic negotiable 
card. The electronic wallet employs the installed elec- 
tronic negotiable card to obtain a product or a service, 
or a required perntissfon, from the supply side. The set- 
tiement process uskng the negotiate card Is performed 
by the electronic wallet and the supply side via the com- 
munication means. The data tiiat are stored In the elec- 
tronic wallet and at the supply side, in assoaatfon with 
the settlement process, are transmitted to the service 
means at a predetermined time, and are managed by 
the service means. 

[P034] In addition, the electronic wallet stores a pro- 
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gram for an electronic payment card. The electronic 
wallet employs the payment card to pay an amount 
charged for a product or a service received from the 
supply side. The settlement process that takes place in 
conjunction with this payment is performed by the elec- 5 
tronic wallet and the supply side via the wireless com- 
munication means. 

[0035] Further, the electronic wallet also stores a pro- 
gram for an electronic telephone card. The electronic 
wallet employs the telephone card to pay an amount 10 
ttiat Is charged by the sipply side for voice comnrunica- 
tions carried by an exchange sen^ice operating via the 
wireless communication means. The settlement proc- 
ess that takes place in conjunction with this payment is 
performed by the electronic wallet and the supply side is 
via the wireless communication means. 
[0036] Furthermore, the electronic wallet stores an 
electronic ticket. By presenting the information held by 
the ticket the electronic wallet and the supply side can 
engage in an examination process, via the wireless 20 
communication means, for the granting, by the supply 
skie, of permission for the tk:ket to be used for admis- 
sion. 

[0037] According to this system, an electronic negoti- 
able card, such as a payment card, a telephone card or 2s 
a ticket, can be downloaded to the electronic wallet 
using the communicatton means and can thus be easily 
acquired. When the electronic payment card Is used to 
purchase a product or to obtain a service, when the 
electronic telephone card is used to pay a communica- 30 
tk)n fee, or when the electronic ticket is used to permit a 
person to pass through an entrance, a settlement proc- 
ess or an examinatbn process is performed through the 
exchange of data by the electronic wallet and the supply 
skJe, so that rapid and accurate processing is enabled. 35 
[0038] Since the data that are stored following the 
completion of a process, both in the electronk: wallet 
and at the supply side, are periodically referred to/man- 
aged by the sendee means, an illegal act can be pre- 
vented. 40 
[0039] According to the invention cited in claim 1 , a 
mobile electronic commerce system for paying, via wire- 
less communication means, a required amount from an 
electronic wallet that includes the wireless communica- 
tk)n means and for receiving a product or a service, or a 45 
required permission, from a supply side, comprises: 

sen^k;e means for connecting the electronk: wallet 
and the supply side via the communication means, 
wherein the service means installs, via the commu- so 
nication means, a program for an electronic negoti- 
able card in the electronic wallet; 
wherein the electronk: negotiable card that is 
installed is empbyed to receive a product or a serv- 
ice, or a required permission, from the suf^ly side; ss 
wherein based on a program for the electronic 
negotiable card a settlement process for which the 
electronic negotiable card is used, is performed by 


the electronic wallet and the supply side via the 

communication means; and 

wherein, in associatton with the settlement process, 

the data that are stored in the electronic wallet and 

at the supply side are transmitted to the service 

means at a predetermined time, and are managed 

thereat 

[0040] Thus, an electronic negotiable card can be 
easily purchased anywhere, and a settlement process 
performed for the electronic negotiate card is rapid and 
accurate. 

[0041] According to the invention cited in claim 2, pro- 
vided is a mobile electronic commerce system fa pay- 
ing, via wireless communicatbn means, a required 
anx>unt using an electronic wallet that includes the wire- 
less communicatk}n means and for receiving a product 
or a service, or a required permission, from a supply 
side, 

wherein, via the wireless communication means, 
the electronk: wallet applies the purchase of a program 
for an electronic negotiable card to service means for 
issuing the program for the electronic negoti£ibte card; 

wherein the service means receives from elec- 
tronic negotiable card issuing means data concerning 
the electronic negotiable card, and with settlement 
means perfonns a settlement that is associated with the 
purchase of the electronic negotiable card; 

wherein, via the wireless communication means, 
the program for the electronic negotiable card is 
installed in the electronic wallet; 

wherein the electronic negotiable card that is 
installed is employed for receiving a product or a serv- 
ice, or a required permission, from the supply sde; and 

wherein, based on the program for the negotiable 
card, a settlement process based on the use of the 
negotiable card is performed by the electronk: wallet 
and the supply skie via the communication means. 
[0042] Therefore, the electronic negotiable card can 
be easily acquired anywhere, and its usability is 
improved. 

[0043] According to the invention cited in claim 3, in 
the settlement process for which the negotiable card is 
used, the electronic wallet generates an electronic 
check corresponding to a payment amount based on 
the program provided lor the negotiable card, and trans- 
mits the electronic check to the supply side via the wire- 
less communication means. Then, the supply side, 
upon receiving the electronic check, transmits an elec- 
tronic receipt to the electronic wallet. Thereafter, the 
electronic wallet and the supply side respectively store 
the electronic receipt and the electronic check as data 
concerning the settlement process. 
[0044] Hius, the settlement process for the negotiable 
card is more accurately performed. 
[0045] According to the invention cited in claim 4, in 
the settlenr)ent process for which the electronic negotia- 
ble card is used, based on the program provkled for the 
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electronic negotiable card the electronic wallet transmits 
data for the electronic negotiable card to the supply side 
via the wireless communication means. Then, the sup- 
ply side, upon receiving the data tor the electronic nego- 
tiable card, transmits to the electronic wallet an 
electronic certificate required for the granting of 
entrance pernvssion and the ac^ission of the owner of 
the electronic wallet. Thereafter, the electronic wallet 
and the supply side respectively store the electronic 
certificate and the data for the electronic negotiable 
card as data concerning the settlement process. 
[0046] As a result an examination process for tickets, 
etc.. can be mechanically perfbnried. 
[0047] According to the invention dted in daim 5, in 
order to transfer the electronic negotiable card that is 
installed in the electronic wallet to a different electronic 
wallet, the electronic wallet generates a transfer mes- 
sage using the electronic negotiable card and transmits 
the message to the different electronic wallet. Then, the 
electronic wallet deletes the stored electronic negotia- 
ble card, and the different electronic wallet transmits, to 
the service means, the transfer message for the negoti- 
able card. Thereafter, the service means installs a pro- 
gram fa the electronic negotiable card in the different 
electronic wallet. 

[0048] As a result, an electronic negotiable card can 
be transferred. 

[0049] According to the invention cited in claim 6. the 
electronic wallet transmits to the service means, via the 
wireless communication means, an installation rumber 
to be recorded on or in a distrtoution medium, such as 
printed matter or a recording medium. Then, tiie service 
means receives, from negotiat)le cairl issuing means, 
data concerning an electronic negotiable card that is to 
be issued, and through wireless oomnnunication installs 
a program for an electronic negotiable card correspond- 
ing to the installation number. 
[0050] As a result, while the printed matter on which 
the installation numt>er has been printed is errployed as 
a distribution medum. the pro-am tor the electronic 
negotiable card can be transmitted along the distrOau- 
tion route as a gift product. 

[0051] According to the invention cited in daim 7. the 
sen^ice means manages a template program that is a 
model of a program tor an electronic negotiable card, 
and based on the terrplate program generates the pro- 
gram for the electronic negotiable card and installs the 
program in the electronic wallet. 
[00S2] As a result, based on the template program a 
variety of different types of electronic negotiable cards 
can be easily issued. 

[0053] According to the invention cited in claim 8. a 
program for an electronic negotiable card includes an 
inherent private key. When an electronic wallet employs 
the negotiable card, the private key is employed to add 
a digital signature to data that are to be transmitted to a 
supply side via oonvnunrcation means. 
[0054] As a result, the electronic wallet can confirm for 


the supply side that tiie data are valid that are gener- 
ated based on the program provided tor the negotiable 
card, and the alteration of the data by the supply side 
can be prevented. 

5 [0055] According to the invention cited in daim 9. pro- 
vided is a mobile electi-onic conrvnerce system for pay- 
ing, via wireless communication means, a required 
amount from an electronic wallet tiiat includes the wire- 
less communication means, and for receiving a product 

10 or a service, or a required permisston. from a supply 
side. 

wherein the electronic wallet hokis an electronic 
paymerrt card that serves as an electronk; payment card 
program. arxJ enploys the electronic payment card 
75 when paying the required amount for the product or tine 
servk;e tiiat is received from the supply side; and 

wherein, via the wireless communication nr>eans, 
the electronic wallet and the supply skle perform a set- 
tiement process that is assodated with the payment 
20 [0056] As a result, the performance of a business 
trar^ctton involving the use of the electi-onic payment 
card is possiDle. 

[0057] According to the invention cited in claim 1 0, an 
electronk; payment card settlement means for making a 
25 payment using the electronk: payment card is provided 
for the supply side. 

[0058] As a result, tfie setti ement process for the elec- 
tronic payment card is performed t>etween the etec- 
t^orric wallet and the electronk: payment card settlement 
30 means. 

[0059] According to the irrvemion dted in claim 1 1 , 
servk;e means is provkJed to connect, via the communi- 
catkxi means, the electronic wallet and the eledronk; 
payment card settlement means and to connect, via the 
35 communication means, tiie payment card issuing 
means and the settlement means, so that the eledronic 
wallet can purchase the electronic payment card 
through the servk;e means. 

[0060] As a result, the electronic payment card can be 
40 purchased via the service means, and for use can be 
downfoaded into the electronic wallet Usability can 
tiierefore be improved. 

[0061 ] According to the invention cited in daim 1 2. the 
e\ectronic wallet the electronic payment card settie- 

45 ment means, and the service means individually indude 
a plurality of types of communication means. The elec- 
ti-onic wallet, tiie electronic payment card settlement 
means, and tiie service means empfoy different com- 
munication means when communication among tiie 

50 tiiree is conducted. 

[0062] Therefore, smooth communication among tiie 
three is possible, and communication secrecy can be 
maintained. 

[0063] According to the invention dted in claim 13. 
55 provided is a nrxibiie electronic commerce system for 
paying, via wireless communication means, a required 
amount from an electronic wallet that includes the wire- 
less communrcation means and for receiving a product 
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or a service, or a required permission, from a suppl/ 
side. 

wherein the electronic wallet holds an electronic 
telephone card that serves as an electronic telephone 
card program, and enploys the electronic telephone . 5 
card when paying a required mount for a communica- 
tion that is performed via wireless communication 
means using an exchange service provided by the sup- 
ply side; and 

wherein the electronic wallet and the supply side w 
perform, via the wireless communication means, a set- 
tierrtent process that accompanies the payment. 
[0064] As a result, communication can t>e performed 
using the electronic telephone card. 
[0065] According to the invention cited in claim 1 4, the is 
supply side includes communication line exchange 
means and electronic telephone card settlement means 
for settling the payment using the electronic telephone 
Ccud. 

[0066] Thus, the settlement process for the electronic 20 
telephone card is pert)rmed by the electronic wallet and 
the electronic telephone card settlement means. 
[0067] According to the invention cited in claim 15. 
service means is provided for connecting, via the com- 
munication means, the electronic wallet and the elec- 2s 
tronic payntent card settlement nf)eans. and for 
connecting, via the communication mearrs. the payment 
card issuing means and the settlemem means, so that 
the electronic wallet can purchase the electronic tele- 
phone card through the service means. ao 
[0068] As a result, the electronic telephone card can 
be purchased via the service means, and for use can be 
downloaded into the electronic wallet. Usability can 
therefore be inproved. 

[0069] According to the invention cited in claim 1 6, the 35 
electronic wallet the electronic telephone card settle- 
ment means, and the service means individually include 
a plurality of types of communication means. The elec- 
tronic wallet the electronic telephone card settlement 
means, and the service means employ different com- 40 
munication means when communication among the 
three is conducted. 

[0070] Therefore, smooth communication among the 
three is possible, and communication secrecy can be 
maintained. 4s 
[0071] According to the invention cited in claim 17. 
provided is a mobile electronic commerce system for 
paying, via wireless communication means, a required 
amount from an electronic wallet that includes the wire- 
less communication means and fa receiving a product so 
or a service, or a required permission, from a supply 
side. 

wherein the electronic wallet holds an electronic 
ticket that is etectronicatly constituted, and provides 
information concerning the electronic ticket; arxJ ss 

wherein the electronic wallet and the supply side 
perform, via the wireless communication means, an 
examination process for the electronic ticket for panting 


permission for an admission. 

[0072] As a result, the mechanical examination of an 
electronic ticket can be automated. 
[0073] According to the invention cited in claim 18. 
electronic ticket examination means fa examining the 
electronic ticket is provided fa the supply side. 
[0074] Thus, the examination process can be initiated 
by communication between the electronic wallet and the 
electronic ticket examination means. 
[0075] According to the invention cited in claim 19, 
service means is provided for connecting, via the com- 
munication means, the electronic wallet and the elec- 
tronic ticket examination means, and for connecting, via 
the communicatkin means, the ticket issuing means and 
the settlement means, so that the electronic wallet can 
purchase the electronic ticket through the service 
means. 

[0076] As a result, the electronic ticket can be pur- 
chased via the service means, and for use can be 
downloaded into the electronic wallet. Usability can 
therefore be improved. 

[0077] According to the invention cited in claim 20. the 
electronic wallet the electronic ticket examinatk)n 
means, and the service means indivklually include a 
plurality of types of communication means. The elec- 
tronic wallet the electronic ticket exanvnatksn means, 
and the service means employ different communicatk)n 
means when communication among the three is per- 
formed. 

[0078] According to the invention dted in claim 21 . a 
mobile electronic commerce system comprises: 

an electronic wallet; 

electronic payment card settlement means; 
electronic telephone card settlement means; 
electronic ticket examination means; 
service provision means; 
settlement processing means; 
payment card issuing means; 
telephone card issuing means; and 
ticket issuing means. 

[0079] Therefore, an electronic payment card, an elec- 
tronic telephone card, and an electronic ticket can be 
purchased through the service providing means, and for 
use can be downtoaded into the electronic wallet. Thus, 
usability is improved. 

[0080] According to the invention cited in claim 22. the 
electronic wallet holds an electronic aedit card and 
employs the electronk; aedit card to purchase the elec- 
tronic payment card, the electronic telephone card a 
the electronic tk:kel 

[0081] Thus, a settlement that is accompanied by the 
purchase of an electronic payment card, an electronic 
telephone card a an electronic ticket is performed 
between the service providing means and the settle- 
ment processing means. 

[0082] According to the inv^on cited in claim 23, the 
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electronic wallet indudes a plurality of kinds of. wireless 
communication means as the plurality of types of com- 
nrunication means. 

[0083] Usability in a mobile environment can therefore 
be tmpfoved. s 
[0084] According to the invention dted in claim 24. as 
means for engaging in wireless communication with the 
electronic payment card settlement means or the elec- 
tronic ticket examination means, the electronic wallet 
includes wireless communication means that has a io 
shorter communication distance and a higher directivity 
than has the wireless communication means employed 
for the electronic telephone card settlement or for the 
service providing means. 

[0085] Since the distance between the electronic wal- is 
let and the electronic payment card settlement means, 
or between the electronic wallet and the electronic ticket 
examination means is at most 1 to 2 meters, the above 
desaibed wireless communication means is selected, 
and thus a system can be obtained that is adequate for 20 
the environment In which It Is used. 
[0086] Aooording to the invention cited in claim 25, as 
means for engaging In wireless communication with the 
electronic payment card settlement means or the elec- 
tronic ticket examination means, the electronic wallet 2s 
includes optical communication means and radio com* 
munication means for engaging In wireless communica- 
tion with the electronic telephone card settlement 
means or the service providing means. 
[0087] Thus, the optical convnunication means, such 3o 
as Infrared communication means. Is employed for short 
distance communication between the electronic wallet 
and the electronic payment card settiement means, or 
for communication between the electronic wallet and 
the electronic ticket examination means, while the radio 35 
communication means is errployed for long distance 
communication between the electronic wallet and the 
service providing means. As a result a system can be 
obtained that is adequate for the environm^ in which it 
is used. 40 
[0088] According to the invention cited in daim 26. tiie 
electronic payment card settlement means indudes 
wireless comnunication means for engaging in commu- 
nication with the service providing means. 
[0089] Therefore, the settiement process can be per- 4S 
fornned in a mobile errvironment. and usability is 
inrrprcved. 

[0090] According to the invention cited in dalm 27, the 
electronic payment card settiement means is an auto- 
matic vending machine that indudes automatic product so 
or service providing means. 

[0091] Thus, a product can be purchased at ttie auto- 
matic vending machine without any cash t>eing 
required, and usability is improved. 
[0092] According to the Invention cited in daim 28, tiie ss 
electronic wallet comprises: 

input means for entering a numerical value and for 


performing a selection operation; 
a central processing unit for generating data to be 
transmitted via the wireless communication means, 
and for processing data received via the wireless 
communication means; 

first storage means for storing a control program for 
controlling an operation performed by the central 
processing unit; 

display means for displaying data processed by the 
cemral processing unit; and 
second storage means for storing the data proc- 
essed by the central processing unit, 
wherein the electronic ticket, the electronic pay- 
ment card or tiie electronic telephone card is stored 
in the second storage means. 

[0093] As a result, the owner of the electronic wallet 
can operate the electronic wallet, and the electronic 
ticket, tiie electronic payment card or the electronic tel- 
ephone card stored in the electronic wallet can be made 
available fa use by the owner. Thus, usability of tiie 
electixxiic wallet is improved. 
[0094] According to the invention cited in daim 29, the 
electronic payment card settlement means Indudes: 

optical communication means for communicating 
with tiie electronic wallet; 

communication means for communicating with the 
service providing means; 

input means for entering a numerical value and per- 

fomiing a selection operation; 

a central processing unit for generating data to be 

transmitted via the optical communication means 

and the convnunication means, and for processing 

data received via the optical communication means 

and the communication means; 

first storage means for storing a corrtrol program for 

conti-olling an operation performed by tiie central 

processing unit; 

display means for displaying data processed by tiie 
central processing unit; and 
second storage means for storing the data proc- 
essed by the central processing unit, 
wherein a settiement process pro-am module for 
tiie elect-onic payment card is stored in the second 
storage mesms. 

[0095] As a result, an operator can operate tiie elec- 
tronic payment card settlement means, and the data 
stored in the electronic payment card settiement means 
can be made available to the person In charge. Thus, 
usability of the electronic payment card settlement 
means is improved. 

[0096] According to the invention cited in daim 30. tiie 
electronic payment card settlement means conprises: 

optical communication means for communicating 
with tiie electronic wallet; 
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radio communication means for comnruinicating 
with the service providing n^ns; 
product identification means for identifying a prod- 
uct type; 

input means for entering a numerical value arxl for s 
performing a selection operation; 
a central processing unit for calculating a charge for 
the product, for generating data to be transmitted 
via the optical communication means and the radio 
communication means, and for processing data 10 
received via the optical communication means and 
the radio communication means; 
first storage means for storing a control program for 
controlling an operation performed by the central 
processing unit; 15 
display mearrs for displaying data processed by the 
central processing unit; 

second storage means for storing the data proc- 
essed by the central processing unit; and 
tNrd storage means for storing value information for 20 
the product. 

wherein a settlement process program nxxiule for 
the electronic payment card is stored in the second 
storage means. 

25 

[0097] Therefore, the calculation of the payment for 
the product, and the settlement process can be per- 
formed in a mobile environment, so that usability is 
improved. 

[0098] According to the invention cited In daim 31 . the 30 
automatic vending machine comprises: 

optical communication means for comnmjnicating 
with the electronic wallet; 

radio communication means for communicating 35 
with the service providing nrteans; 
selection means for selecting a product to be pur- 
chased or a service; 

automatic providing means for providing the prod- 
uct a the service; 40 
a central processing unit for generating data to be 
transmitted via the optical communication nr>eans 
and the radio communication means, and for 
processing data received via the optical convnuni- 
cation means and the radio conmunication means; 4s 
first storage means for storing a control program for 
controlling an operation perfomied by the central 
processing unit; 

display means for displaying data processed by the 
central processing unit; so 
second storage means for storing the data proc- 
essed by the central processing unit; 
third storage means for storing value irrfomnation 
and stock information for the i^-oduct; and 
fourth storage means for storing promotion informa- ss 
tion for the product or for the service, 
wherein a settlement process program module for 
the electronic payment card is stored in the second 


storage means. 

[0099] Therefore, tiie process extending from the time 
a product is promoted until it is sold can be automated, 
and usability is improved. 

[0100] According to tiie invention cited in claim 32, tiie 
electronic telephone card settiement means comprises: 

radio communication means for communicating 
wrtti tiie electronic wallet; 

communication means for communicating with ttie 
service providing means; 

communication line exchange means for exchang- 
ing a plurality of communication lines; 
a central processing unit for generating data to be 
transnvtted via the radio communication means 
and the communication means, and for processing 
data received via tiie radio communication means 
and the communication means; 
first storage means for storing a control program for 
controlling an operation performed by the central 
processing unit; and 

second storage means for storing the data proc- 
essed by the central processing unit, 
wherein a settiement process program module for 
tiie electi-onlc telephone card is stored in the sec- 
ond storage means. 

[01 01] Thus, the provision of the communication serv- 
ice and the collection of communication charges can be 
performed at tiie same time, and the rate at which tiie 
communication charges are collected can be improved. 
[01 02] According to the invention cited in claim 33, tiie 
electronic ticket examination means conrprises: 

optical communication means for communicating 
witii tiie electronic wallet: 

communication means for comnunicating with the 
service provicfing means; 

input means for entering a numerical value and for 

performing a selection operation; 

a centiBt processing unit for generating data to be 

transmitted via the optical communication means 

and the communication means, and for processing 

data received via the optical communication means 

and the communication means; 

first storage means for storing a control program for 

comrolling an operation performed by the central 

processing unit; 

display means for displaying data processed by tiie 
central processing unit; and 
second storage means for storing the data proc- 
essed by the central processing unit, 
wherein an examination program module for tiie 
electronic ticket is stored in the second storage 
means. 

[0103] As a result, the operator can operate the elec- 
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tronic ticket means, and the data stored in the electronic 
ticket means can be made available to the person in 
charge of the data, so that usability of the electronic 
ticket means is improved. 

[0104] Accorcfing to theinvention cited inxrfaim 34, the 5 
service providing means comprises: 

user infomnation storage means for storing informa- 
tion concerning the etectronic wallet and informa- 
tion concerning a settlement contract concluded io 
with an owner of the electronk; wallet; 
merchant information storage means for storing 
inforrrtation concerning the ^ectronic payment card 
settlement means, the electronic telephone card 
settlement means and the electronic ticket exami- is 
rtation means, and information concerning a settle- 
ment contracts concluded with owners of electronk: 
payment cards, electronic telephone cards and 
electronic tickets; 

settlement processor information storage means for so 
storing lnformatk)n concerning the settlement 
processing means; 

payment card Issuer infonnatk)n storage means for 
storing information concerning the payment card 
issuing means, and information concerning a settle- 2S 
ment contract concluded with an owner of the pay- 
ment card issuing means; 
tel^one card issuer information storage means 
for storing irtformatfon concerning the telephone 
card issuing means, and informatk>n concerning a so 
settlement contract concluded with an owner of the 
tel^hone card issuing means; 
ticket issuer information storage means for storing 
information concerning the ticket issuing means, 
and information concerning a settlement contract 35 
concluded with an owner of the ticket issuing 
means; 

sendee director information storage means for stor- 
ing list information for the electronic wallet, the elec- 
tronk; payment card settlement means, the 4o 
electronk; telephone card settlement means, tiie 
electronk: ticket examination means, the settlement 
processing means, the payment card issuing 
means, the telephone card issuing means and the 
ticket issuing means, and information concerning 4S 
the electronic ticket, the electronic payment card 
and the electronic telephone card; and 
a computer system for processing data in a service 
provisfon process for selling, issuing and managing 
the electronic ticket, the electronic payment card so 
and the electronk; telephone card. 

[0105] As a result, the servk:e provkJing nrieans can 
effrcientiy mar^ge the electronic wallet, the electronic 
payment card settlement means, etc.. and provide the ss 
electronk: payment card service, the electronic tele- 
phone card service and the electronic ticket service. 
[0106] According to the invention cited in daim 35, the 


settiemertt processing means comprises: 

communication means for communicating with ttie 
service providing means; 

subscriber information storage means for storing 
information concerning a settlement contract con- 
cluded with an owner of the electronic wallet; 
member shop information storage means for stor- 
ing information concerning settlement contracts 
concluded with owners of electronic payment card 
settiement means, electronic telephone card settle- 
ment means, electronic ticket examination means, 
payment card issuing means, telephone card issu- 
ing means, arxi ticket issuing means; and 
a conputer system for processing data employed in 
a settiement process. 

[0107] As a result, the settiement processing means 
can efficiently perform a settiement 
[01 08] According to the inventfon cited in daim 36. tiie 
payment card issuing means comprises: 

communication means for communicating with tiie 
service providing means; 

customer information storage means for storing 
informatfon concerning the purchase history of a 
custonter; 

payment card issuance informatfon storage means 
for storing Information concerning a payment card 
ttiat has been issued; 

payment card information storage means for storing 
informatfon concerning the stock of payment cards; 
and 

a computer system for processing data during a 
payment card issuing transaction process. 

[0109] As a result, tiie payment card issuing means 
can efficiently issue payment cards. 
[0110] According to the invention cited in daim 37, tiie 
telephone card issuing means comprises: 

communication means for comnrujnicating with tiie 
service providing means; 

customer information storage means for storing 
information concerning the purchase history of a 
customer; 

telephone card issuance information storage 
means for storing information concerning a tele- 
phone card that has been issued; 
telephone card information storage means for stor- 
ing informatfon concerning the stock of telephone 
cards; and 

a computer system for processing data concerning 
a telephone card issuing transactfon process. 

[01 1 1 ] As a result, tiie telephone card issiing means 

can evidently issue telephone cards. 

[01 1 2] According to the inventfon cited in daim 38, tiie 
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ticket issuing means conrtprises: 

conmnunication means for communicating with the 
service providing means; 

customer information storage means for storing 
information concerning the purchase history of a 
customer: 

ticket issuance information storage means for stor- 
ing information concerning a ticket that has been 
issued: 

ticket information storage means for storing infor- 
mation concerning the stock of tickets; and 
a computer system for processing data concerning 
a ticket issuing transactnn process. 

[0113] As a result, the ticket issuing means can effi- 
ciently issue tickets. 

[01 14] According to tiie invention cited in daim 39, the 
electronic wallet generates and then transmits, to the 
sendee providing means* a payment card application 
message for the purchase of an electrons payment 
card; the service provkiing means, tpon receiving the 
payment card application message, communicates with 
the payment card issuing nf)eans and receives there- 
from an electronic payment card issuance request mes- 
sage requesting that the service provding means 
perform an electi'onk; paymerrt card Issuing process 
and an electronic payment card charge settlement proc- 
ess; the servk^ providing means, upon receiving the 
request message, communicates with the settiement 
processing means to perform tiie settiement process for 
the charge for the payment card, generates an elec- 
tronic payment card from payment card informaticxi that 
is generated by the payment card issuing means and is 
included in tiie electronic payment card issuance 
request message, and transmits tiie electronic payment 
card to the electronic wallet; and the electronic wallet 
upon receiving the electa^onic payment card, stores the 
electronic payment card in the second storage means 
thereof. 

[0115] Therefore, the owner of the electronic wallet 
can purchase anywhere, as an electrons payment card, 
a payment card that is issued by the payment card issu- 
ing means, and for use, can download rt to the electronic 
wallet. As a result, usability is improved. 
[0116] According to the invention cited in daim 40. a 
microK^heck message, generated by an electronic pay- 
ment card stored In the secorxl storage means, is trans- 
mitted to the electronic payment card settlement nrteans 
in order to confirm the submission of a payment that is 
the equivalent of an amount entered by the input 
means. 

[01 1 7] Since the payment amount is designated by the 
owner of the electronic wallet, the performance of an 
illegal act by a retail shop can be prevented. 
[0118] According to tiie invention cited in daim 41 , the 
electronic payment card settiement means, upon 
receiving the mk;ro-check message, generates and 


then transmits, to the electronic wallet, the reception 
message to acknowledge that the miao-check mes- 
sage has been received. 

[0119] Since tiie owner of the electronic wallet can 

5 confirm the contents of a transaction, the exchange of a 
printed receipt, such as a statement of account is not 
required, and a sale can be performed more effidently. 
[01 20] According to the invention cited in claim 42, tiie 
electronic wallet generates and then transmits, to the 

10 service provkling means, a telephone card appilcatfon 
message requesting the purchase of an electronic tele- 
phone card; the service providing means, upon receiv- 
ing the telephone card application message, 
oomnunicates with the telephone card issuing means 

15 and receives tiierefrom an electronic telephone card 
issuance request message indicating the service pro- 
viding means has been requested to perform an elec- 
tronic telephone card issuing process and an electronic 
telephone card charge settlement process; the sendee 

20 provkJing means, ipon receiving the request message, 
oomnunk^ates with tiie settiement processing means to 
perform the settiement for tiie charge for the telephone 
card, generates an electronic telephone card using tele- 
phone card infomiatfon that is generated by the tele- 

25 phone card issuing means and is induded in the 
electronic telephor)e card issuance request message, 
and transmits the electronic telephone card to the elec- 
tronic wallet: and the electronic wallet, upon receiving 
the electronic telephone card, stores ttie electronic tele- 

30 phone card in the second storage means thereof. 

[0121] Therefore, the owner of the electronic wallet 
can purchase anywhere, as an electronic telephone 
card, a telephone card that is issued by the telephone 
card issuing means, and fa use can download it to the 

35 electronic wallet. As a result, usability is improved. 
[0122] According to the invention dted in daim 43. a 
telephone nticro-check message is generated by an 
electronic telephone card stored in tiie second storage 
means and is transmitted to the etecti^onic telephone 

40 card settlement means in order to confirm the submis- 
sion of a payment that is equivalent to an amount 
charged by tiie electronic telephone settlement means. 
[0123] Therefore, wireless communicatron service 
using tiie prepafo settiement system can be obtained. 

45 and usability is improved. 

[01 24] According to ttie inveition cited in claim 44, ttie 
electronic telephone card settiement means, upon 
receiving the telephone micro-check message, gener- 
ates and then transmits, to tiie electronic wallet, a 

so receipt message acknowledging that the telephone 
mrcro-check message has been received. 
[0125] Thus, the owner of the electronic wallet can 
confirm the contents of a wireless communkiation serv- 
ice ttiat is provided. 

55 [01 26] According to the invention cited in claim 45, ttie 
electronic wallet generates and ttien transmits, to ttie 
service provkling means, a ticket application message 
requesting the purchase of an electronic tktot; ttie serv- 
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ice providing means, upon receiving the ticket applica- 
tion message, communicates wrth the ticket issuing 
means, and receives therefrom an electronic ticket issu- 
ance request message that indicates the service provid- 
ing means has been requested to perform an electronic 5 
ticket issuing process and an electronic ticket charge 
settlement process: the service providing means, upon 
receiving the request message, communicates with the 
settlement processing means to perform the settlement 
of the charge for the ticket, generates an electronic 10 
ticket from ticket information that is generated by the 
ticket issuing means and is included In the electronic 
ticket issuance request message, and transmits the 
electronic ticket to the electronic wallet; and the elec- 
tronic wallet, ipon receiving the electronic ticket stores 75 
the electronic ticket in the second storage means 
thereof. 

[0127] Th^efore. the owner of the electronic wallet 
can purchase anywhere, as an electronic tktet a ticket 
that is issued by the ticket issuing means, and for use. 20 
can download it to the electronk; wallet. As a result, usa- 
bility is improved. 

[0128] Accordng to the invention cited in daim 46. the 
electronk: wallet generates a ticket presenting message 
that describes tiie contents of the electronic ticket ss 
stored in the second storage means, and transmits the 
ticket presenting message to the electronic ticket exam- 
ination means. 

[01 29] Therefore, tickets can be eff k:lemty examined. 
[01 30] According to tiie invention cited In daim 47. the 30 
electi'onk: wallet, upon receiving a command message 
from the electrcOTic tk^ket examination means, changes 
the electaonic ticket to a post-examined state, and gen- 
erates and then transmits, to the electronic ticket exam- 
ination means, a ticket examination response message 35 
that describes the contents of tiie electronic ticket tiiat 
has been changed. 

[0131] As a result, tiie tk:kets can be precisely and 
effkiientiy examined. 

[01 32] According to the invention cited in daim 48. tiie ^ 
electrons ticket examinatbn means, upon receiving tiie 
ticket examination response message, generates and 
then tnnsmits, to the electaonic wallet, an examination 
certificate message tfiat verifies tiie electronic ticket has 
been examined. 45 
[0133] Thus, the tickets can be more precisely exam- 
ined. 

[0134] According to the invention cited in claim 49, a 
first electronic wallet generates a payment cafd transfer 
certificate message verifying that the electronic pay- so 
ment card stored in tiie second storage means is to be 
transfen'ed to a second electaronic wallet, and transmits 
the payment card tawsfer certifk:ate message via wire- 
less commmicatwn means to the second electronic 
wallet; the second electronic wallet transmits, to tiie 55 
service providing means, ttie payment card transfer cer- 
tificate message that is received: tiie service provkling 
means performs an examination to establish the vatkifty 


. of the payment card transfer certificate message tiiat is 
received, and transmits, to the second electronic wallet, 
the electronic payment card that is described in tiie pay- 
ment card transfer certificate message: and the second 
etectaDnic wallet stores, in the second storage means 
tfiereof. the electronic payment card that is received. 
[01 35] Therefore, tiie eledr onic payment card can be 
transferred to another person, and usability is improved. 
[01 36] According to the invention cited in daim 50. tiie 
second electrons wallet, vpon receiving tiie payment 
card ti^nsfer certificate message, generates a payment 
card receipt message confimiing that the payment card 
ti^nsfer certificate message has been received, and 
transmits the payment card rece^ message via the 
wireless communication means to tiie frst electronic 
wallet; and tiie first ^ectronic wallet, upon receiving the 
payment card receipt message, deletes the eledronk; 
payment card stored in the second storage means 
tiiereof. 

[01 37] Therefore, the electronic payment card can t>e 
predsely transferred, and tiie problems that may 
accompany such a transfer can be avokled. 
[0138] According to the invention cited in ctaim 51. a 
first electronic wallet generates a telephone card trans- 
fer certificate message confirming that the eledronk; 
telephone card stored in the second storage means is to 
be tiBnsfen-ed to a second eledronk; wallet and trans- 
mits the telephone card f ansfer certificate message via 
wireless oommunk:ation means to tiie second eiectronk; 
wallet; the second electronic wallet transmits, to tiie 
service provkling means, tiie telephone card transfer 
certifk^ate message that is received: the service provid- 
ing means performs an examination to estat»lish the 
vaWity of the telephone card ti-ansfer certifkate mes- 
sage that is received, and t^ansmits. to the second elec- 
tronic wallet tiie electronic telephone card that is 
described in the telephone card transfer certificate mes- 
sage; and the second eledronic wallet stores, in tiie 
second storage means thereof, tiie electronic telephone 
card that is received. 

[0139] Therefore, the electa^onic telephone card can 
be transferred to another person, and usability is 
improved. 

[0140] According to the invention cited in daim 52. the 
second eledronk; wallet, upon receiving the telephone 
card transfer certificate message, generates a tele- 
phone card receipt message confirming that tiie tele- 
phone card transfer certificate message has been 
received, and transmits the telephone card receipt mes- 
sage via tiie wireless communication means to the first 
eiectronk; wallet; and tiie first electrortic wallet, upon 
receiving the telephone card receipt message, deletes 
tiie eledronic telephone card stored in the second stor- 
age means thereof. 

[0141] Therefore, tiie electronic telephone card can 
be precisely ti-ansferred. and the problems tiiat may 
accompany such a transfer can be avokled. 
[0142] According to the Invention dted in claim 53. a 
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first electronic wallet generates a ticket transfer certifi- 
cate message confirming that the electronic ticket 
stored in the second storage means is to be transferred 
to a second electronic wallet, and transmits the ticket 
transfer certificate message via wireless communica- 5 
tkin means to the second electronic wallet; the second 
electronic wallet transmits, to the service providing 
means, the ticket trEuisfer certificate message ttiat is 
received; tiie service providing means performs an 
examination to establish the validity of the ticket ti-ansfer 10 
certificate message that is received. arxJ transmits, to 
the second electronic wallet, an electronic tktet that is 
descrit>ed in the ticket transfer certificate message; and 
the second electronic wallet stores, in the second stor- 
age means thereof, the electronic ticket tiiat is received. 15 
[0143] Therefore, the electronk; ticket can be trans- 
ferred to another person, and usability is inrproved. 
[0144] According to the invention cited In daim 54, tiie 
secorxi electronic wallet, ipon receiving the ticket trans- 
fer certifk»te message, generates a ticket receipt mes- 20 
sage confirming that the ticket transfer certificate 
message has been received, and transmits tiie ticket 
receipt message via the wireless communication means 
to tiie first electrOTic wallet; and tiie first electronk; wal- 
let, upon receiving the ticket receipt message, deletes 25 
the electrons ticket stored in tiie second storage means 
thereof. Therefore, the electronk; ticket can be precisely 
transferred, and tiie problems that may accompany 
such a transfo' can be avokled. 

[0145] According to the invention cited in daim 55, tiie 30 
electronic wallet generates and then transmits, to tiie 
sennce providing means, an electronic payment card 
installation request message requesting the installation 
of an electronic payment card; the servk:e providing 
means, upon receiving the payment card installation 35 
request message, communicates with tiie payment card 
Issuing means and receives therefrom an electronic 
payment card installatkm request message indicating 
that tiie servrce providing means Is requested to install 
an electronic payment card: the service providing 40 
means, ipon receiving the request message, generates 
an electronic payment card using payment card infor- 
matk)n that is generated by the payment card issuing 
means and is included in tiie electronic payment card 
installation request message, and transmits tiie elec- 4s 
tronic payment card to tiie electronic wallet; and tiie 
electronic wallet upon receiving the electronic payment 
card stores the electronic payment card in tiie second 
storage means tiiereof. 

[0146] Therefore, the owner of the electrons wallet so 
can install an electronic payment card in the elecfronic 
wallet anywhere. 

[0147] According to ttie invention crted in daim 56, ttie 
electronic payment card installation request message 
includes electi-onic payment card installatKin informa- ss 
tion tiiat is entered by input means for the elecb-onic 
wallet and that uniquely descrit>es an electronic pay- 
ment card tiiat is to be installed. 


10148] Therefore, the owner of tiie electronic wallet 
can install a desired electronic payment card in tiie elec- 
tronic wallet. 

[0149] According to the invention cited in claim 57. ttie 
electronic wallet generates and tiien transmits, to ttie 
service providing means, an electronic telephone card 
installation request message for requesting tiie installa- 
tion of an electronic telephone card; the service provid- 
ing means, upon receiving the telephone card 
installation request message, communicates with tiie 
telephone card issuing means, and receives therefrom 
an electronic telephone card installation request mes- 
sage indicating that the service providing means is to 
install an electronic telephone card; tfie service provid- 
ing means, upon receiving ttie request message, gener- 
ates an electronic telephone card using telephone card 
information that Is generated by the telephone card 
issuing mear^ and ttiat is induded in the electrons tel- 
ephone card installation request message, and ti'ans- 
mits the electronic tel^hone card to the electronic 
wallet; and the electronk: wallet, upon receiving the 
electronic telephone card, stores tiie electiwic tele- 
phone card in the second storage means thereof. 
[0150] Therefore, the owner of the electi'onic wallet 
can install an electronk: telephone card in the electi'onic 
wallet anywhere. 

[0151] According to tiie invention crted in claim 58. ttie 
electronic telephone card installation request message 
includes tiie electronic telephone card installation infor- 
mation tiiat is entered by input means for tiie electronic 
wallet and tiiat uniquely describes an electronk: tele- 
phone card tiiat is to be installed. 
[0152] Therefore, the owner of the electronic wallet 
can install a desired electronic telephone card in the 
eledronic wallet. 

[01 53] According to the invention cited in claim 59. tiie 
electronic wallet generates and tiien transmits, to the 
service providing means, an eledronic ticket installation 
request message requesting the installatfon of an elec- 
tronic ticket; the service provding means, upon receiv- 
ing the ticket installation request message, 
oommunfoates with the ticket issuing means, and 
receives therefrom an electronic ticket installation 
request message indicating tiiat the service providing 
means is to install an electronic ticket; the service pro- 
viding means, upon receiving the request message, 
generates an electronic trcket using ticket informatfon 
that is generated by the ticket issuing means and is 
included in the electronic ticket installation request mes- 
sage, and transmits the electronic ticket to ttie eledronic 
wallet; and ttie electronic wallet, upon receiving ttie 
eledronic ticket, stores the eledronic ticket in ttie sec- 
ond storage means thereof. 

[0154] Therefore, the wner of the electronic wallet 
can install an eledronic ticket in tiie electronic wallet 
anywhere. 

[0155] According to the invaition cited in claim 60, tiie 
eledronic ticket installation request message indudes 
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the electronic ticket irtstaltation information that is 
entered by input means for the electronic wallet and that 
uniquely describes an electronic ticket that is to be 
installed. 

[0156] Therefore, ^e owner of the electronic wallet s 
can install a desired electronic ticket in the electronic 
wallet. 

[01 57] According to the invention cited in daim 61 . the 
electronic payment card installation information, the 
electronic telephone card installation information or the io 
electronic ticket installation information consists of first 
identification information describing a type of electronic 
paynrient card, a type of electronic telephone card or a 
type of electronic ticket, and second identffication infor* 
mation that uniquely desabes an electronic payment is 
card, an electronic telephone card or an electronic 
ticket, of a type deserved using the first identification 
inforniatk)n, that is to be installed. The second kJentifi- 
cation information is information generated at random. 
[01 58] Thus, an illegal installation that is performed for 20 
amusement can be prevented. 
[0159] According to the invention cited in daim 62, the 
first identification information and the second kientif ica- 
tion information are represented by 8-digrt numerals 
and 32-digit numerals. ss 
[0160] As a result, using a simple numerical entry, a 
maximum of 100 millkxi types of electronic payment 
cards, electronic telephone cards or electronic tickets, 
and a 10^^ assortment of a single type can be desig- 
nated. 30 
[0161] According to the invention cited in claim 63, an 
object whereon or wherein the electronic payment card 
installation information, the electronic telephone instal- 
latfon information or the electronic ticket installation 
informatfon is printed or engraved s employed as sales 35 
distrbution means or transfer means for the electronic 
payment card, the electronic telephone card or the elec- 
tronic ticket. 

[0162] Therefore, the owner of the ^ectronic wallet 
can reduce the communicatfon costs involved in the 40 
purchase of such a card or a ticket, vyhile he or she can 
use it as a gift. Thus, the distribution and the utilization 
of electronic payment cards, electronic telephone cards 
and electronic tickets can be improved. 
[0163] According to the invention cited in claim 64. a 4S 
recording medium on which the electronic payment card 
installation information, the electronic telephone instal- 
latfon information or the electronic ticket installation 
information is stored is employed as sales distribution 
means or transfer means for an electronic payment so 
card, an electronic telephone card or an electronic 
ticket. 

[0164] Therefore, the distribution and the utilization of 
electronic payment cards, electronic telephone cards 
and electronic tk^kets can be improved. ss 
[0165] According to the invention cited in daim 65. tiie 
sen^ice providing means generates and ttien transmits, 
to the electronic wallet a modification command mes- 


sage for tiie modification, of the contents of tiie elec- 
tronic ticket; and the electronic wallet, upon receiving 
tiie modification command message, iqDdates the elec- 
tronic ticket stored in the second storage means to pro- 
vide a new electi-onic ticket as is desaibed in the 
modification command message. 
[0166] As a result, the contents of a ticket that has 
been issued can be changed at a tow cost. 
[01 67] According to the inventfon cited in daim 66, tiie 
servtee provkJing means generates and ttien transmits, 
to the electronic wallet, a modification notrficatfon mes- 
sage for the modifkation of the contents of tiie elec- 
ti'onic ticket; the electronic wallet, upon receiving the 
modificatfon notification message, generates and then 
transmits, to the servk^e providing means, a reaction 
selection message acknowledging receipt of tiie mes- 
sage for tiie modifkation of the contents of the elec- 
tronic ticket; tiie service provkJing means, upon 
receiving the reaction selection mess^e, generates 
and then transmits, to the electronic wallet, a modifrca- 
tion command message instructing tiie modification of 
tiie contents of tiie electronic tid«t; and the electronk: 
wallet upon receiving the modification command mes- 
sage, updates the ^ectronic ticket stored in tiie second 
storage means to provide a new electi-onic ticket that is 
described in the modification command message. 
[0168] As a result, the owner of the electronk: ticket 
can be notified when there is a change in the contents 
of a concert, and can update the electrons ticket 
[01 69] According to the inventfon cited in daim 67, ttie 
service providing means generates and then transmits, 
to the electronic wallet, a modif k:ation notification mes- 
sage for tiie modifkation of the contents of ttie elec- 
tronic ticket; the electronic wallet, upon receiving the 
modificatfon notification message, generates and then 
ta^ansmits. to the service provkiing means, a reaction 
selection message requesting a refund for the elec- 
tronic ticket; the service providing means, upon receiv- 
ing the reactfon selection message, communicates witii 
tiie settiement processing means to issue a refund for 
tiie electronic ticket, and generates and ttien transmits, 
to the electi-onic wallet, a refond receipt message indi- 
cating that a refund process has been completed; and 
tiie electi'onic wallet upon receiving tiie refund receipt 
message, deletes the electronic ticket from tiie second 
storage means. 

[0170] Therefore, the owner of tiie electronic ticket 
does not have to visit a ticket retail shop to obtain a 
refund, and can request and receive a refund anywhere. 
[0171] According to the invention dted in claim 68, a 
computer system in the service provkJing means com- 
prises: 

user information processing means for communi- 
cating with the electronic wallet and for processing 
irrformation stored in user information storage 
means; 

merchant information processing means for com- 
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muntcating with the electronic payment card settle- 
ment means, the electronic telephone card 
settlement means or the electronic ticket examina- 
tion means, and for processing information stored 
in merchant information storage means; 
settlement processor information processing 
means for communicating with the electronic settle- 
ment processing means, and for processing infor- 
mation stored in settlement processor information 
storage means; 10 
payment card issuer information processing means 
for communicating with the payment card issuing 
means, and for processing information stored in 
payment card issuer information storage means; 
telephone card issuer information processing 15 
means for communicating with the telephone card 
issuing means, arxl for processing information 
stored in telephone card issuer information storage 
means; 

ticket issuer information processing means for com- zo 
municating with the ticket issuing means, and for 
processing information stored in ticket issuer infor- 
mation storage means; 

service director information processing means for 
communicating with the user information process- 2s 
ing means, the merchant infonnation processing 
means, the settlement processor information 
processing means, the payment card issuer infor- 
mation processing means, the telephone card 
Issuer information processing moans and the ticket 30 
issuer information processing means, and tor inter- 
acting with those means while processing data dur- 
ing a service providing process; and 
service manager information processing means for 
controlling tiie generation and the deletion of the 35 
user information processing means, the merchant 
information processing means, the settlement proc- 
essor information processing means, the payment 
card issuer information processing means, tiie tele- 
phone card issuer information processing means, 4o 
the ticket issuer information processing means and 
the service director information processing means. 

[0172] Thus, the calculation function of the computer 
system can be efficientiy distributed anrang the individ- 4S 
uat information processing means. 
[01 73] According to the invention cited in claim 69, the 
el^onic wallet generates and then transmits, to the 
service providing means, a payment card registration 
request message requesting tiiat the service providing so 
means register, as an electronic payment card that is to 
be used by the owner of the electronic wallet, an elec- 
tronic payment card that is stored in the second storage 
means; and the service providing means, upon receiv- 
ing the payment card registration request message, reg- ss 
isters the electronic payment card for use in the service 
director information storage means. 
[0174] Therefore, an electronic payment card to be 


26 

used and a sleeping electi^onic paymerit card can be 
managed separately, and an efficient service operation 
is possible. 

[0175] According to the invention cited in claim 70, tiie 
, service providing nieans, upon receiving the payment 
card registration request message, generates and then 
transmits, to the electronic wallet, a registered card cer- 
tificate confirming that the electronic payment card has 
been registered for use; and the electi'onic wallet stores, 
in the second storage means, the registered card certif- 
icate tiiat is rec^ved and changes tiie state of the elec- 
tronic payment card to tiie usable state. 
[0176] Since an electronic payment card must be reg- 
istered t>efore it can k>e used, if a sleeping electronic 
payment card tiiat is not registered for use is stolen, it 
can not be used illegally. 

[0177] According to tiie invention cited in claim 71, tiie 
electronic wallet generates and then transmits, to tiie 
service providing means, a telephone card registration 
request message requesting that service provkJing 
means register, as an electronic telephone card that is 
to be used by tiie owner of tiie electronic wallet, an elec- 
bronic telephone card that is staed in the second stor- 
age means: and the service providing means, upon 
receiving tiie telephone card registration request mes- 
&age, registers the electronic telephone card for use in 
the service director information storage means. 
[0178] Therefore, an electronic telephone card to be 
used and a sleeping electrons telephone card can be 
managed separately, and an efficient service operatk}n 
is possible. 

[0179] According to the invention cited in claim 72, ttie 
service providing means, upon receiving the telephone 
card registration request message, generates and then 
b^nsmrts, to the electronic wallet, a registered card cer- 
tifk:ate confirming that the electronic telephone card has 
been registered for use; and the electronic wallet stores, 
in tiie second storage means, the registered card certif- 
icate tiiat is received and changes ttie state of the elec- 
ti'onic telephone card to the usable state. 
[0180] Since an electronic payment card must be reg- 
istered t>efore it can be used, if a sleeping electronic 
payment card tiiat is not registered for use is stolen, it 
can not be used illegally 

[0181] According to the invention cited in claim 73, ttie 
electronic wallet generates and ttien transmits, to ttie 
service providing means, a ticket registration request 
message requesting that the second storage means 
register, as an electronic ticket that is to be used by tiie 
owner of the electronic wallet, an electronic ticket tiiat is 
stored in tiie second staage means; and the service 
provkling means, upon receiving tiie ticket registration 
request message, registers tiie electi'onic tk:ket for use 
in the service director information storage means. 
[01 82] Therefore, an electronic ticket to be used and a 
sleeping electronic ticket can be separately managed, 
and effk:tent sendee operation is possible. 
[01 83] According to the invention cited in claim 74. ttie 
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service providing means, upon receiving the ticket reg- 
istration request message, generates and then trans- 
mits, to the electronic wallet a registered ticket 
certificate that verifies the electronic ticket has been 
registered for use; and the. electronic, wallet stores, in 5 
the second storage means, the registered ticket certifi- 
cate that is received, and changes the state of the elec- 
tronic ticket to the usable state. 
[0184] Since an electronic payment card must be reg- 
istered before it can be used, if a sleeping electronic 10 
payment card that is not registered for use is stolen, it 
can not be used illegally. 

[0185] According to the invention cited in daim 75, the 
electronk; payment card conprises: 

15 

a payment card program; 

presented card infbrmatkxi descrbing the contents 
of the electronic payment card when issued; and 
a card certifk:ate indicating that the electrons pay- 
ment card » authentic. The payment card program 20 
includes: 

electronk; payment card state management infbr- 
matbniarxl 

payment card program data for specifying an oper- 
ation to be performed by the electronic payment 2s 
card. The digital signature of the owner of the serv- 
ice providing means is provided for the presented 
card lnfonnatk)n. 

[0186] As a result, a settlement perfbnned with and a 30 
transfer of the electronic payment card can be safely 
effected. 

[0187] According to the invention cited in daim 76, the 
payment card program irK:ludes a card signature private 
key that is errployed Ibr a digital signature provkied for 35 
the electronic payment card. The card certifk:ate is a 
public key certif k:ate verifying that a card signature pub- 
lic key that is paired with the card signature private key 
is authentic. 

[0188] Thus, a digital signature for the electronic pay- 
ment card can be provkled for a message generated by 
the electronic payment card, and the valkJity of the mes- 
sage can be verified. According to the invention cited in 
claim 77. a settlement program nfx)dule for the elec- 
tronic payment card includes two cryptographic keys, an 45 
accounting devkse authentication private key and a card 
authenticatk)n public key The payment card program 
Indudes an accounting device authenticatton public key. 
which is paired with the accounting devk^e authentica- 
tion private key. and a card authentk:ation private key. so 
which is paired with the card authentication public key. 
[0189] Ther^ore, the electronic wallet and the elec- 
tronic payment card settlement means can mutually 
perform the authentication process, arxl the safety of a 
settlement performed with the payment card is ss 
improved. 

[0190] According to the invention cited in daim 78. the 
payment card proj^am data indudes: 


a transaction module program for specifying the 
procedures to be used for message data that are 
exchanged by the electronic wallet and the elec- 
tronic payment card settlement means; 
a display module program for specifying the man- 
ner in which the electronic payment card is to be 
displayed; and 

representative conponent information for the elec- 
tronic payment card. A central processing unit in 
the electronic wallet processes, in accordance with 
the transactton module program for the electronic 
payment card, the message data that are 
exchanged with the electronk; payment card setde- 
merrt means, and displays the representative com- 
ponent infbrmaton in accordance with the display 
nK)dule program of the electronic payment card, so 
that on display means the electronic payment card 
is displayed in the electronic wallet. 

(01 91 ] Various types of electronic payment cards can 
be safely issued by employing together the transaction 
nxxJute program, the display module program and the 
representative component information. 
[0192] According to the inventksn dted in claim 79. a 
template program that constitutes a model for the elec- 
tronic paynf>ent card is stored in the payment card issuer 
informatksn storage means for the service providing 
means. 

[0193] Thus, various types of electronic payment 
cards can be safely issued by individual payment card 
issuers. 

[01 94] According to the invention cited in daim 80, the 
tenplate program for the electronic payment card 
includes: 

a transaction module program for the electronk: 
payment card; 

a display module program; and 
representative component information. 

[01 95] Therefore, various types of electronic payment 
cards can be safely issued. 

[01 96] According to the invention cited in daim 81 , the 
electronic telephone card comprises: 

a telephone card program; 
presented card information describing the contents 
of the electronic telephone card when issued; and 
a card certifk:ate indicating that the electronic tele- 
phone card is authentic. The telephone card pro- 
gram includes: 

electronic telephone card state management infor- 
matron; and 

telephone card program data for specifying an 
operation to be performed by the electronic tele- 
phone card. The digital signature of the owner of 
the service providing means is provded for the pre- 
sented card information. 
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[0197] As a result, the settlement of a communication 
fee by using the telephone card and the transfer of the 
telephone card can be performed safety. 
[01 98] According to the invention cited in daim 82 , the 
telephone card program includes a card signature pri- 
vate key that is employed for a digital signature provided 
for the electronic telephone card. The card certificate is 
a public key certificate verifying tfiat a card signature 
public key that is paired with the card signature private 
key is authentk;. 

[01 99] Thus, a digital signature for the electronic tele- 
phone card can be provided for a message generated 
by the electronk; telephone card, and the validity of the 
message can be verified. 

[0200] According to the invention cited in daim 83. a 
settlement program module for the electronic telephone 
card irK:ludes two cryptographic keys, an accounting 
device authentication private key and a card authentica- 
tkMi public key. The telephone card program Includes an 
accounting devk^e authentication public key. which is 
paired with the accounting device authenticatk}n private 
key. and a card autiientication private key. which is 
paired with tiie card authentication public key 
[0201] Therefae. the electronic wallet and the elec- 
tronic telephone card settiement means can mutually 
perform tiie authentk»tion process, and the safety of a 
settlement performed witii the telephone card is 
improved. 

[0202] According to tiie invention cited in daim 84, tiie 
telephone card program data indudes: 

a transactk)n module program for spedfying the 
procedures to be used for message data that are 
exchanged by the electronic wallet and the elec- 
tronic telephone card settiement means: 
a display module program for specifying tiie man- 
ner in whk:h the electronic telephone card is to be 
displayed; and 

representative component information for the elec- 
tronic telephone card. A central processing unit in 
the electronic wallet processes, in accordance with 
the transaction module program for the etecti'onic 
telephone card, the message data that are 
exchanged with the electronic telephone card set- 
tlement means, arxl displays the representative 
component information in accordance witii the dis- 
play module program for tiie electronic telephone 
card, so that on display means the electronic tele- 
phone card is displayed in the electix>nk: wallet. 

[0203] Various types of electronic telephone cards can 
be safely issued by enploying togetiier the transaction 
module program, the display module program, and the 
representative conrponent information. 
[0204] According to the invention dted in daim 85, a 
template program tiiat constitutes a model for the elec- 
tronic telephone card is stored in tiie telephone card 
issuer informatbn storage means for the service provkl- 


ing means. 

[0205] Thus, various types of electi-onic telephone 
cards can be safely issued by individual telephone card 
issuers. 

5 [0206] -According to the inv^tion cited in claim 86, the 
template program for tiie electronic telephone card 
includes: 

a transaction module program for the electronic tel- 
10 ephonecard; 

a display module program; and 
representative component information. 

[0207] Therefore, various types of electinnic tele- 
15 phone cards can be safely issued. 

[0208] According to the inv&ition cited in claim 87. tiie 
electronic ticket comprises: 

a ticket program; 
20 presented ticket information describing the con- 
tents of the electronic tk;ket when issued: and 
a ticket certificate indicating that tiie electronic 
ticket is authentic. The ticket program includes: 
electronic ticket state management information; 
25 and 

ticket program data for specifying an operation to 
be performed by the electronic ticket. The digital 
signature of tiie owner of the sen^ice providing 
means is provided fa tiie presented ticket informa- 
30 tion. 

[0209] As a result, the examination and the transfer of 
the electronic telephone card can t>e performed safely 
[0210] According to the invention cited in claim 88, tiie 

35 ticket program includes a ticket signature private key 
that is employed for a digital signature provided for tiie 
electronic ticket. The ticket certificate is a ptblic key cer- 
tifk:ate verifying that a ticket signature public key that is 
paired with the ticket signature private key is authentic. 

40 [021 1 ] Thus, a digital signature for the electronic ticket 
can be provided for a message generated by the elec- 
tronic ticket and the validity of tiie message can t>e ver- 
ified. 

[0212] According to the invention dted in daim 89. an 
45 examination program module for the electrorvc ticket 
includes two cryptographic keys, a gate authentication 
private key and a ticket authentication public key The 
ticket card program includes a gate authenticatk}n pub- 
lic key. which is paired wrtii the gate autiientication pri- 
50 vate key. and a ticket autiientication private key. which is 
paired witii the ticket authentk:ation put)lic key. 
[0213] Therefore, the electronic wallet and the elec- 
tronic ticket examination means can mutually perform 
the authentication process, and the safety of the exami- 
55 nation performed for the ticket is improved. 

[0214] According to the invention cited in claim 90. tiie 
ticket program data includes: 
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a transaction module program for specifying the 
procedures to be used for message data that are 
exchanged by the electronic wallet and the elec- 
tronic ticket examination means; 
a display module program for specifying the man- s 
ner in which the electronic ticket is to be displayed; 
and 

representative component informatk)n for the elec- 
tronic ticket A central processing unit In the elec- 
tronic wallet processes, in accordarx:e with the 10 
transaction module program for the electronic 
ticket the message data that are exchanged with 
the electronic ticket examination means, and dis- 
plays the representative componerrt information in 
accordance with the display module program for the is 
electronic ticket, so that on display means the elec- 
tronic ticket is displayed in the electronic wallet 

[021 51 Varkxis types of electronic tickets can be safety 
issued by errptoying together the transaction nrvxlule 20 
program, the display module program, and the r^re- 
sentative conrponent Information. 
[0216] According to the invention cited in claim 91, a 
template program that constitutes a model for the elec- 
tronic ticket Is stored in the tk^ket issuer information stor- ss 
age means for the servk^e providing means. 
[021 7] Thus, various types of electronk; tickets can be 
safety issued by individual tkitet issuera 
[0218] According to the invention cited in daim 92, the 
template program tor the electronic tkkeX includes: 30 

a transaction nxxjule program for the electronic 
ticket; 

a display OKxJule program; and 

representative component information. 35 

[0219] Therefore, various types of etectrontc tickets 
can be safely issued. 

[0220] According to the invention cited in claim 93. 
dentification information that describes a payment 40 
method selected by the irput means for the electronic 
wallet Is included In the payment card application mes- 
sage Issued by the electronic wallet when requesting 
the purchase of an electronic payment card. 
[0221] Therefore, the payment method can be 4s 
selected when an electronic payment card is pur- 
chased, and usability is improved. 
[0222] AccorcEng to the invention cited in daim 94, the 
electronk: payment card issuance request message or 
the electrons payment card installation request mes- so 
sage indudes template program Klentification informa- 
tion for designating. In the order to be used for the 
generation of an electronic payment card, one of a plu- 
rality of template programs that are stored in the pay- 
ment card issuer informatfon storage means. 55 
[0223] Therefo^e, the payment card issuing means 
can designate a tenrptate program to be used for the 
electrons payment card, and can issue various types of 


■ electronk: paymem cards. 
[0224] According to the inventfon cited in daim 95, the 
electronic payment card issuance request message or 
the electronic payment card installation request mes- 
sage indudes representative component, information 
describing the representative component information to 
be used tor an electronic payment card that is to be gen- 
erated. 

[0225] Therefore, selected representative component 
informatfon can be employed when an electronic pay- 
ment card is issued, and a high degree of freedom can 
be exerdsed in the selection of the type of electronic 
payment card that is to be issued. 
[0226] According to the invention cited in daim 96, the 
electronk: wallet generates and then transmits, to the 
servk;e provkjing means, a payment card registration 
request message requesting that the service providing 
means register, as an electronic payment card that is to 
be used by the owner of the electronic wallet, the elec- 
tronic paynrient card stored in the second storage 
means for the electronic wallet; the service providing 
means, upon receiving the payment card registration 
request message, newly generates, for the electronk: 
paynient card, a card signature private key, a card sig- 
nature public key and a registered card certificate for 
authenticating the card signature public key, registers 
the electronic payment card for use in the service direc- 
tor InfornDation storage means, arid then transmits, to 
the electronic wallet, the card signature private key and 
the registered card certificate; and the electronic wallet 
updates the card signature private key and the regis- 
tered card certificate that are in storage by replacing 
them with those that have newly been received, and 
changes the state management information for the elec- 
trorric payment card to a usable state. 
[0227] Since the signature key for the electronic pay- 
ment card is updated for use by the registration, safety 
is improved. 

[0228] According to the Invention cited in daim 97, the 
electronk: wallet employs an electronic payment card, 
which is selected by input means for the electronic wal- 
let from among those stored in the second storage 
means, to generate a micro-check message that verifies 
a payment corresponding to an amount entered by the 
input means, and transmits the micro-check message to 
the electronic payment card settlement means. 
[0229] Therefore, an electronic paymerrt card to be 
used can be selected, and us^ility can be improved. 
[0230] According to the invention cited in daim 98. the 
electrons wallet employs an electronic payment card, 
which is selected by input means of the electronic wallet 
from anrong those stored in the second storage means, 
to generate a paymem offer message that offers a pay- 
ment corresponding to an amount entered by the input 
means, and transmits the payment offer message to the 
electronk: payment card settlement means; the elec- 
tronic payment card settlement means, upon receiving 
the payment offer message, generates and then trans- 
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mtts, to the electronic wallet, a payment offer response 
message that assesses a charge corresponding to an 
amount entered by Input means for the electronic pay- 
ment card settlement means: the electronic wallet, upon 
receiving the payment offer response message and If ,5 ^ 
the assessed charge is equal to or smaller than an 
amount entered by the input means for the electronic 
wallet, subtracts the assessed charge from a remaining 
amount stored on the electronic payment card, and gen* 
erates and then transmits, to the electronic payment 10 
card settlement means, a nrvcro-check message validat- 
ing a payment corresponding to the assessed charge: 
the electronic payment card settlement means stores 
the received micro-check message in the second stor- 
age means for the electronic payment card settlement 15 
means, and generates and then transmits, to the elec- 
tronic wallet, a receipt message confirming that the 
micro^eck message has been received; and the elec- 
tronic wallet stores the received receipt message in the 
second storage means for the electronic wallet. 20 
[0231] Since an amount higher than that designated 
by the owner of the electronic wallet is not paid, safety 
can be improved. 

[0232] According to the invention cited in daim 99. the 
payment offer message Includes: 25 

a payment amount entered by the input means of 
the electronic wallet; 

presented card information and a registered card 
certificate for the electronic payment card; and 30 
state management information to which a dgital 
signature has been added using the card signature 
private key 

[0233] Therefore, the contents of the electronic pay- 35 
ment card to be used for the payment are concisely pre- 
sented to the electronic payment card settlement 
means, so that the electronic payment card settlement 
means can detemiine whether the card is a valid elec- 
tronic payment card. 40 
[0234] According to the invention cited in claim KX). 
the micro-check message includes: 

a payment amount; 

an amount remaining stored on the electronic pay- 4s 
ment card; 

iderrtification information for the electronic payment 
card settlement means; and 
identification information for the owner of the elec- 
tronic payment card settlement means. Further, a so 
digital signature is provided for the micro-check 
message by using the card signature private key for 
the electronic payment card. 

[0235] As a result, the amount of the payment and the ss 
person making the payment are verified, and the impo- 
sition of an illegal charge by a retail shop can be pre- 
vented. 


[0236] According to the invention cited in claim 101. 
the digital signature of the owner of the electronic wallet 
is also provided for the micro-check message. 
[0237] Since a determination is made as to whether or 
not the micro-check was issued by the owner of the 
electronic payment card, an examination of the validity 
of the micro-check can be precisely performed. 
[0238] According to the invention cited in claim 102, 
the mk^ro-check message Includes a nticro-check issu- 
ing numt>er representir^ the order in which micro-check 
messages are generated by the electronic payment 
card. 

[0239] Since the matching of the order of generatk3n 
of the micro-check and the amount remaining can be 
determined, an examination of the validity of the micro- 
check can be more precisely performed. 
[0240] According to the invention cited in claim 1 03, at 
a time designated by the service provkjing means, the 
electronic payment card settlement means generates 
an i43k>ad data message that includes data stored in the 
second storage means for the electronk: payment card 
settlement means, and then transmits the upload data 
message to the service providng means; the service 
provkling means, tpon receiving the upfoad data mes- 
sage, examines the valkJity of a microKiheck that is 
included in the upfoad data message by comparing the 
micro-check with registration Information for the elec- 
tronic payment card that is registered in the service 
director information storage means, and generates and 
then transmits, to the electronic payment card settie- 
ment means, an i^xjate data message that includes 
update data for the second storage means for the elec- 
tronic payment card settlement means: and the elec- 
tronic paynrient card settlemerrt means extracts the 
update data from the update data message that is 
received, and updates data stored in the second stor- 
age means. 

[0241] Therefore, the micro-check that has been used 
can be automatically collected, and can be examined to 
detemnine its valkJity. 

[0242] According to the invention cited in daim 104. a 
first electronic wallet generates a payment card transfer 
offer message containing an offer to transfer, to a sec- 
ond electronic wallet, an electronic payment card that is 
stored in the second storage means, and then transmits 
the payment card transfer offer message, via the wire- 
less communication means, to the second electronic 
wallet; the second electronic wallet, upon receiving the 
payment card transfer offer message, generates a pay- 
ment card transfer offer response message indicating 
that the contents of the payment card transfer offer mes- 
sage are accepted, and then transmits the payment 
card transfer offer response message, via the wireless 
communication means, to the first electronic wallet; and 
the first electronk; wallet, upon receiving the payment 
card transfer offer response message, generates and 
then transmits, to the second electronic wallet, a pay- 
ment card transfer certificate message confirming the 
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transfer C3f the electronic payment card to the second 
electronic wallet. 

[0243] Therefore, the side that is to transfer the elec- 
tronic (payment card and the side that is to receive the 
electronic payment card can perform /legotiations oon-.~ 5 
earning the contents. 

[0244] According to the invention cited in datm 105, 
the payment card transfer offer message includes: 

presented card information, and a card certificate io 
or a registered card certificate for the electronic 
payment card; 
and 

state management information having an added 
digital signature prepared using a card signature is 
private key. 

[02451 Thus, the side to which the electronic payment 
card Is to be transfen^ed can confirm its contents in 
advance. so 
[0246] According to the invention dted in daim 106, 
the payment card transfer offer message indudes a 
public key certifk:ate for the owner of the first electronic 
wallet: a digital signature of the owner of the first elec- 
tronic wallet is provided for the payment card transfer ss 
offer message; the payment card transfer offer 
response message indudes a pM'ic key certificate for 
the owner of the second electronic wallet; a digital sig- 
nature of the owner of the second electronic wallet is 
provided for the payment card transfer offer message; so 
the payment card transfer certificate message Indudes 
Klentification information for the putilic key certificate of 
the owner of the first eiedronic wallet and kJentification 
information for the public key certificate of the owner of 
the second electronic wallet: and a digital signature 35 
using a card signature private key for the electronic pay- 
ment card and a digital signature of the owner of the first 
electronic wallet are provided for the payment card 
transfer certificate message. 

[0247] Thus, the person to whom the electronic pay- 4o 
ment card is to be transferred is guaranteed, and even 
when the payment card transfer certrf k^ate is stden, the 
unauthorized use of card can be prevented. 
[0248] According to the invention dted in daim 107. 
identification infomfiatk)n that describes a payment 45 
method selected by the input means of the electronic 
wallet is induded in the telephone card application mes- 
sage issued by the electronic wallet when requesting 
the purchase of an electronic telephone card. 
[0249] Therefore, the payment method can be 50 
selected when an electronk: telephone card is pur- 
chased, and usd3ility is improved. 
[0250] According to the invention dted In daim 108, 
the electronic telephone card issuarrce request mes- 
sage or the electronk: telephone card installation 55 
request message indudes template program kientifica- 
tion information for designating, following the order that 
is to be used for the generation of electronic telephone 


cards, one of a plurality of tenplate programs that are 
stored in the telephone card issuer information storage 
means. 

[0251] Therefore, the telephone card issuing means 
can designate a template program to be used tor the 
electrons telephone card, and can Issue various types 
of electronic telephone cards. 
[0252] According to the invention dted in daim 109. 
tiie electronic telephone card issuance request mes- 
sage or the electronk; telephone card installation 
request message indudes representative component 
informatton describing representative component infor- 
mation to k>e used for an electronic telephone card that 
is to be generated. 

[0253] Therefore, selected representative component 
informatkin can be employed when an elecb'onic tele- 
phone card is issued, and a high degree of freedom can 
be exerdsed in the selection of the type of electronic tel- 
ephone cards that is to be issued. 
[0254] According to the invention dted in daim 1 10. 
the electronic wallet generates and then transmits, to 
the service providing means, a telephone card registra- 
tion request message requesting that the service pro- 
vkiing means register, as an electronic telephone card 
tiiat is to be used by the owner of the electronk; wallet, 
the electronic telephone card stored in the second stor- 
age means for the electronic wallet; the service provid- 
ing means, upon receiving the telephone card 
registratton request message, newly generates, for the 
electronk; telephone card, a card si^ture private key. 
a card signature public key and a registered card certif- 
kate for confirming the card signature public key. regis- 
ters for use the electronic telephone card in the servk;e 
director information storage means, and then transmits, 
to the eiedronic wallet, the card signature private key 
and the registered card certificate: and the eiedronic 
wallet updates the card signature private key and the 
registered card certificate tiiat are in storage by replac- 
ing them with those that have newly been received, and 
changes the state management information for the elec- 
tronic telephone card to a usable state. 
[0255] Since the signature key for the electronk; tele- 
phone card is updated for use by the registration, safety 
is improved. 

[0256] According to the invention cited in daim 111. 
the eiedronic wallet employs an electronic telephone 
card, which is selected by input means for the eiedronic 
wallet from among those stored in the second storage 
means, to generate a micro-check message verifying a 
payment con'esponding to an amoum entered by the 
input means, and transmits the micro<heck message to 
the electronic telephone card settlement means. 
[0257] Therefore, an electronic telephone card tfiat is 
to be used can t>e seleded. and usability can be 
improved. 

[0258] According to the invention dted in daim 112, 
the eiedronic wallet employs an electronic telephone 
card, which is selected by input means for the electronk; 
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wallet from among those stored in the second storage 
means, to generate a micro*check call request message 
requesting a radio communication service in order to 
communicate with a side that is designated by the input 
means, and transmits the micro*check call request mes- s 
sage to the electronic telephone card settlemerrt 
means: the electronic telephone card settlement 
means, upon receiving the micro-check call request 
message* generates and then transnvts. to the elec- 
tronic wallet a miao-check call response message for w 
an amount charged that con^esponds to a communica- 
tion fee: the electronic wallet, upon receiving the miao- 
check call response message, subtracts the amount 
charged from the remaining amount stored on the elec- 
tronic telephone card, and generates artd then trans- 75 
mits. to the electronic telephone card settlemerrt means, 
a telephone micro-check message verifying the pay- 
ment of an amount corresponding to the amount 
charged: the electronic telephone card settlemem 
means, upon receiving the telephone micro-check mes- 20 
sage, generates and then transmits, to the electronic 
wallet, a receipt message confirming the receipt of the 
telephone micro-check message; and the electronic 
wallet stores the received receipt message in the sec- 
ond storage means for the electronic wallet. 2s 
[0259] Therefore, the communication service provider 
can charge an amount that corresponds to a fee for a 
provided wireless communication service. 
[0260] According to the invention cited in claim 1 13, 
the electronic telephone card settlement means, when 30 
radio wireless communication sen/ice is provided, gen- 
erates and then transmits, to the electronic wallet, a 
communication fee charge nr)essage for an amount 
charged that corresporxJs to an additional communica- 
tion fee: the electronic wallet upon receiving the com- 35 
munication fee charge message, subtracts the amount 
that is charged from an amount remaining on the elec- 
tronic telephone card, and generates and then trans- 
mits, to the electronic telephone card settlement means, 
a new telephone micro-check message verifying pay- 4C 
ment of the total amount charged: the electronic tele- 
phone card settJemertt means generates and then 
transmits, to the electronic wallet, a receipt message 
confirming that the telephone micro-check message 
has been received: the electronic wallet updates a 4S 
receipt message stored in the second storage means 
tor the electronic wallet by storing therein the receipt 
message that is newly received; and the electronic tele- 
phone card settlemem nieans, wfien provision of the 
radio wireless conrvnunication service is terminated, so 
stores the latest telephone micro-check message in the 
second storage means for the electronic telephone card 
settlement means. 

[0261] Therefore, the amount of history information Is 
rxit increased very much even though the payment of ss 
additional fees Is effected many times during the com- 
munication process. 

[0262] According to the invention cited in claim 1 14, 


the micro-check call request message includes: 

identification information for the side that is desig- 
nated by the input means of the electronic wallet; 
presented card information and a registered card 
certificate for the electronic telephone card; and 
state nianagement information accompanied by a 
digital signature that is provided by using a card sig- 
nature private key. 

[0263] Therefore, the contents of the electronic tele- 
phone card that are to be used for payments are pre- 
sented exactly to the electronic telephone card 
settlement means, so that the electronic telephone card 
settlement means can determine whether the card is a 
valid electronic telephone card. 
[0264] According to the invention cited in claim 1 15, 
the telephone micro-check message includes: 

a payment amount; 

a amount remaining stored on the electronic tele- 
phone card; 

kientrfication information for the electronic tele- 
phone card settlement means; and 
klentificatfon information for the owner of the elec- 
tronic telephone card settlement means. Further, a 
digital signature is provided for the telephone 
micro-check message by using the card signature 
private key of the electronic telephone card. 

[0265] As a result, the anx)unt of the payment and the 
person making the payment are verified, and the impo- 
sition of an illegal charge by the owner of the electronic 
telephone card settlement means can be prevented. 
[0266] According to the invention cited in claim 1 16, 
not only the digital signature using the card signature 
private key for the electronic telephone card, but also 
the digital signature of the owner of the electronic wallet 
is provided for the telephone micro-check message. 
[0267] Since whether or not the telephone micro- 
check has been issued is determined by the owner of 
the electronic telephone card, a precise examination of 
the validity of tiie telephone micro-check can be per- 
formed. 

[0268] According to the invention cited in claim 1 17, 
the telephone micro-check message includes a tele- 
phone micro-check issuing number representing the 
order in which telephone micro-check messages are 
generated by tiie electronic telephone card. 
[0269] Since the matching of the generation order for 
the telephone micro-check and the amount remaining 
can be determined, a more precise examination of the 
validity of the telephone micro-check can be performed. 
[0270] According to the invention cited in claim 1 18, at 
a time designated by the service provkjing means, the 
electronic telephone card settlement means generates 
an ipload data message that includes data stored in the 
second storage means for the electronic telephone card 
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settlemerTt means, and then transmits the upload data 
message to the service providing means; the service 
providing means, upon receiving the upload data mes- 
sage, examines the validity of a telephone micro-check 
that is included in the upload data message by compar- 5- 
ing the telephone miao-check with registration informa- 
tion for the electronic telephone card that is registered in 
the service director information storage means, and 
generates and then transmits, to the electronic tele- 
phone card settlement nieans, an update data message w 
that includes update data for the second storage means 
for the electronic telephone card settlement means; and 
the electronic telephone card settlement means 
extracts the update data from the update data message 
that is received, and updates data stored in the second 75 
storage means. 

[0271] Therefore, the telephone micro-check that has 
been used can be automatically collected, and an 
examination of its validity can be performed. 
[0272] According to the invention cited in claim 1 1 9, a zo 
first electronic wallet generates a telephone card trans- 
fer offer message offering to transfer, to a second elec- 
tronic wallet, an electronic telephone card that is stored 
in the second storage means, and transmits the tele- 
phone card transfer offer message via the wireless com- 25 
munication means to the second electronic wallet; the 
second electronic wallet, upon receiving the telephone 
card transfer offer message, generates a telephone 
card transfer offer response message incficating that the 
contents of the telephone card transfer offer message 30 
are accepted, and then transmits the telephone card 
transfer offer response message via the wireless com- 
munication means to the first electronic wallet; and the 
first electronic wallet, i4X}n receiving the telephone card 
transfer offer response message, generates and then 35 
transmits, to the second electronic wallet, a telephone 
card transfer certificate message confirming the transfer 
of the electronic tel^one card to the second electronic 
wallet. 

[0273] Therefore, the side that is to transfer the elec- 40 
tronic telephone card and the side that is to receive the 
electronic telephone card can negotiate the provisions 
of the transfer. 

[0274] According to the invention dted in daim 120, 
the telephone card transfer offer message includes: as 

presented card information and a card certificate or 
a registered card certificate for the electronic tele- 
phone card; and 

state management information accompanied by a so 
digital signature added by using a card signature 
private key. 

[0275] Thus, the side to which the electronic tele- 
pf>one card is to be transferred can confirm its contents ss 
in advance. 

[0276] According to the invention dted in daim 121 , 
the telephone card transfer offer message includes a 


piblic key certificate for ttie owner of the first electronic 
wallet; the digital signature of the owner of the first elec- 
tronic wallet is provided for tf)e telephone card transfer 
offer message: the telephone card transfer offer 
response message indudes a putslic key certificate for 
the owner of tiie second electronic wallet; the digital sig- 
nature of the owner of the second electronic wallet is 
provided for the telephone card transfer offer message; 
the telephone ceird transfer certificate message 
includes identification information for the public key cer- 
tificate for tiie owner of tiie first electronic wallet arxi 
identification information for tiie public key certificate for 
tiie owner of tiie second electronic wallet; and a digital 
signature using a card signature private key for tiie elec- 
ti-onic telephone card and the digital si^ature of tiie 
owner of the first electronic wallet are provided for tiie 
telephone card transfer certificate message. Thus, tiie 
person to whom the electronic telephone card is to be 
transferred is identified, and even rf tiie telephone card 
transfer certif icale is stolen, the unauthorized use of that 
card can be prevented. 

[0277] According to the invention cited in daim 122, 
identification information that describes a payment 
mettiod selected by tiie input means of the electronic 
wallet is induded in the ticket application message 
issued by tiie electronic wallet when requesting the pur- 
chase of an electronic ticket. 

[0278] Therefore, the payment method can be 
selected when an electronic ticket is purchased, and 
usability is improved. 

[0279] According to the invention cited in daim 123, 
the electi'onic ticket issuance request message or the 
electronic ticket installation request message indudes 
template program identification information for designat- 
ing, following the order tiiat is to be used for the gener- 
ation of electronic tickets, one of a plurality of template 
programs tiiat are stored in the ticket issuer information 
storage means. 

[0280] Therefore, the ticket issuing means can desig- 
nate a tenplate program to be used for the electronic 
ticket, and can issue various types of electi^onic tickets. 
[0281] According to the invention dted in claim 124. 
tiie electronic ticket issuance request message or tiie 
electronic ticket installation request message indudes 
representative component information deschbing repre- 
sentative component information for an electronic ticket 
tiiat is to be generated. 

[0282] Therefore, selected representative component 
informatfon can be employed when an electronic ticket 
is issued, and a high degree of freedom can be exer- 
dsed in tiie selection of tite type of electronic ticket tiiat 
is to be issued. 

[0283] According to the invention dted in daim 125, 
the electronic wallet generates and then transmits, to 
the service providing means, a ticket registration 
request message requesting that tiie service providing 
means register, as an electronic ticket tiiat is to be used 
by tiie owner of the electi-ontc wallet tiie electronic ticket 
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Stored in the second storage means for the electronic 
wallet; the service providing means, upon receiving the 
ticket registration request message, newiy generates, 
for the electronic ticket, a ticket signature private key, a 
ticket signature public key and a registered ticket certif i- 5 
cate for verifying the ticket signature public key, regis- 
ters the electronic ticket for use in the service director 
information storage means, and then transmits, to the 
electronic wallet the ticket signature private key and the 
registered ticket certifk:ate: and the electronic wallet 70 
updates the ticket signature private key and the regis- 
tered ticket certificate that are stored by replacing them 
with those that have been newly received, and changes 
the state management informatk}n for the electronic 
ticket to a usable state. ^5 
[Q284] Since for use the signature key for the elec- 
tronic ticket is updated by the registration, safety is 
improved. 

[0285] According to the Inventbn cited in claim 126. 
the electronic wallet generates a ticket presenting mes* 20 
sage in wNch is designated an electronic ticket that is 
selected, from among those stored in the second stor- 
age means, by input means for the electronic wallet 
and transmits the ticket presenting message to the elec- 
tronic tk:ket examination means. 2S 
[0286] Therefore, an electronic ticket that is to be used 
can be selected, and usability can be improved. 
[0287] Accordir)g to the inventk>n cited in claim 127. 
the electronic tk:ket examination means, upon receiving 
the ticket presenting message, generates and then 30 
transmits, to the electronic wallet a ticket examination 
message instructing the modification of the electronic 
ticket to a post-examined state: the electronic wallet 
upon receiving the ticket examination message, 
changes the electronic ticket to the post-examined 35 
state, and generates and then transmits, to the elec- 
tronic ticket examination means, a ticket examination 
response message that describes the contents of the 
nxxiified electronic ticket; the electronk; ticket exan^na- 
tion means stores the received ticket examination 4c 
response message in the second storage means for the 
electronic ticket examination nf>eans. and generates and 
then transmits, to the electronic wallet an examination 
certificate message certifying that the electronic ticket 
has been examined; and the electronic wallet stores the 45 
received examination certificate message in the second 
storage means for the electronic wallet Therefore, the 
electronic ticket examination means can perform the 
examination process in consonance with the contents of 
the ticket that is presented. so 
[0288] According to the invention dted in claim 128. 
the ticket presenting message includes: 

presented ticket information and a registered ticket 
certificate for the electronic ticket; and 55 
state management information accompanied by a 
digital signature provided by using a ticket signature 
private key. 


[0289] Therefore, the contents of the electronic ticket 
to t>e used for payment are precisely presented to the 
electronic tick^ examination means, so that the elec- 
tronic ticket examination means can determine whether 
the ticket is a valid electronic ticket. 
[0290] According to the invention cited in claim 129, 
the ticket examination response message includes: 

state management information for the electronic 
ticket; 

identification information for the electronic ticket 
examination means; and 

klentrfication irrformation for the owner of the elec- 
tronic ticket examination means. Further, a digital 
signature is provided for the ticket examination 
response message by using the ticket signature pri- 
vate key for the electronic ticket. 

[0291 ] As a result, the contents of the electronic ticket 
that is examined are verified, and an illegal charge 
imposed by the owner of the electronic ticket examina- 
tx)n means can be prevented. 
[0292] According to the invention cited in claim 130, 
the ticket examinatk>n response message includes 
identification information for the electronic ticket exami- 
nation means and kjerrtificatksn information for the 
owner of the electronic ticket examination means. Fur- 
ther, the digital signature prepared using the ticket sig- 
nature private key for the electronic ticket and the digital 
signature of the owner of the electronic wallet are pro- 
vided for the ticket examination response message. 
[0293] Since it can be determined whether or rxn the 
ticket examination response message has been issued 
by the owner of the electnxiic ticket, a preose examina- 
tion of the validity of the ticket examinatk)n response 
can be performed. 

[0294] According to the invention cited in claim 131, 
the ticket examination response message includes a 
ticket examination number representing the order in 
which ticket examinatk>n response messages are gen- 
erated by the electronic ticket. 
[0295] Since the matching of the generation order for 
the ticket examination response message and the 
rennaining amount can be determined, a more precise 
examination of the validity of the ticket examination 
response message can be performed. 
[0296] According to the invention cited in claim 132. at 
a time designated by the service providing means, the 
electronic ticket examination nneans generates an 
upload data message that includes data stored in the 
second storage means for the electronic ticket examina- 
tion means, and then transmits the upload data mes- 
sage to the service providing means; the service 
providing means, ifxsn receiving the upbad data mes- 
sage, determines the validity of a ticket examinatbn 
response that is included in the upload data message 
by comparing the ticket examination response with reg- 
istration information for the electronic ticket that is regis- 
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tered in the service director information staage means, 
and generates and then trartsmits, to the electronic 
ticket examination means, an update data message that 
irx:ludes update data for the second storage means for 
the electronic ticket examination means; the electronic 5 
ticket examination means extracts the update data from 
the update data message that is received, and updates 
data stored in the second storage means. 
[0297] Therefore, the ticket examination response can 
be automatically compiled, and its validity can be exam- 10 
ined. 

[0298] According to the invention cited in claim 133. a 
first electronic wallet generates a ticket traisfer offer 
message offering to transfer, to a secorvi electronic wal- 
let, an electronic ticket that is stored in the second stor- 15 
age means, and then transmits the ticket transfer offer 
message.via the wireless communication means to the 
second electronic wallet; the second electronk; wallet, 
upon receiving the ticket transfer offer message, gener- 
ates a ticket transfer offer response message indicating 20 
the contents of the ticket transfer offer message are 
acceptable, and tiien transmits the ticket tiBnsfer offer 
response message via the wireless communication 
means to the first electronic wallet; Bxti the first elec- 
tronic wallet ipon receiving the ticket transfer offer 2s 
response message, generates and tiien transmits, to 
the second electronic wallet a ticket transfer certifkate 
message confirming the transfer of the electronic ticket 
to the second electronk; wallet. Therefore, the skJe tiiat 
is to transfer the electronic ticket and the skle that is to 30 
receive the electronic ticket can perform negotiations 
corx^erning the oorrtents. 

[0299] According to the invention dted in claim 134. 
the ticket transfer offer message includes: 

35 

presented ticket information and a ticket certifrcate 
or a registered ticket certificate for tiie electronic 
ticket; and 

state management information acoomparried by a 
digital signature tiiat is added by using a ticket sig- 40 
nature private key. 

[0300] Thus, the side to which the electronic ticket is 
to be transferred can confirm the ticket contents in 
advarKe. as 
[0301] According to the invention dted in daim 135. 
the ticket transfer offer message indudes a public key 
certificate for the owner of the first electronic wallet; the 
digital signature of the owner of the first electronic wallet 
is provkJed for the tktot transfer offer message: the so 
ticket transfer offer response message includes a publk: 
key certificate for the owner of the second electronic 
wallet; the digital signature of the owner of the secorxl 
electronk; wallet is provided for the ticket transfer offer 
message: the ticket transfer certifkate message ss 
indudes identification informatnn for tiie public key cer- 
tificate for the owner of tiie first electronic wallet and 
kientif ication informatfon for the public key certif cate for 


the owner of the second electronic wallet; and a digital 
signature using a ticket signature private key for tiie 
electronic ticket and the digital signature of the owner of 
the first electronic wallet are provided for the ticket 
transfer certificate message. 
[0302] Thus, the person to whom the electronic ticket 
is to be transfen-ed is verified, and even if the ticket 
transfer certrffoate is stolen, the unauthorized use of that 
ticket can be presented. 

[0303] According to the invention dted in daim 136. 
settiemerrt optfon information for dedding which proce- 
dures to use for settiement is induded in the electronk: 
p^ment card issuance request message, in the elec- 
tronic telephone card issuance request message or in 
the elecb-onic ticket issuance request message. 
[0304] Thus, the payment card issuer, tiie telephone 
card issuer and the ticket issuer can estat}lish proce- 
dures to be used for the settlement 
[0305] According to tiie invention dted in daim 137. 
the service providing means, upon receiving the elec- 
tronic payment card issuance request message, tiie 
electronk: telephone card issuance request message or 
the electronic ticket issuar^e request message, gener- 
ates and then transmits, to the electronk: wallet an 
electronk: payment card, an electronic telephone card 
or an electronic ticket before performing a price settie- 
ment in accordance with the settiement optfon informa- 
tion. 

[0306] Thus, the electronic payment card, the elec- 
tronic telephone card or the electronic ticket can be 
issued without the purchaser being delayed. 
[0307] According to the invention dted in daim 138. 
the service providing means, upon receiving the elec- 
tronic payment card issuance request message, the 
electronk: telephone card issuance request message or 
tiie electronic ticket issuance request message, gener- 
ates and then t-ansmits, to tiie electronk: wallet an 
electronk: payment card, an electronic telephone card 
or an electronic ticket, and a temporary receipt mes- 
sage describing the contents of a settlement before per- 
forming a price settiement in accordance with tiie 
settiement option information. 
[0308] Thus, the electronic payment card, tiie elec- 
tronic telephone card or the electronic ticket can be 
issued without tiie purd^aser being delayed. 
[0309] According to the invention dted in daim 139, 
data corK:erning the electronic payment card, the elec- 
tronic telephone card and the electronic ticket belonging 
to tiie owner of the electronic wallet and data proc- 
essed by the central processing unit of tiie electronic 
wallet are stored in the second storage means for tiie 
electronk: wallet or in the user information storage 
means for the service providing means; the data are 
managed by desaibing, in the second storage means 
for the electronic wallet, identification information for the 
data, and addresses of the data in the corresponding 
storage means; when data at an address in the user 
information storage means are to be processed, tiie 
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electronic wallet generates and then transmits, to the 
service proMmg means, a remote access request mes- 
sage requesting address data; the service providing 
means, upon receiving the remote access request mes- 
sage, generates and th&i transmits, to the electronic „ 5 
wallet, a remote access data message in which the 
requested data are included; and the electronic wallet 
upon receiving the rennote access data message, 
extracts the requested data from the message. 
[0310] Therefore, a plurality of electronic payment 10 
cards, electronic telephone cards and electronic tickets, 
and multiple sets of history information can be managed 
for the electronic, even in a memory having only a lim- 
ited capacity. 

[0311] According to the invention cited in claim 140. 15 
the electronic wallet enrptoys a ferroelectric nonvolatile 
memory as storage means. 

[0312] Therefore, the service life of the battery of the 

electronic wallet can be extended. 

[031 3] According to the invention cited in daim 1 41 , a 20 

ferroelectric nonvolatile memory is employed as storage 

means for the electronic payment card settlement 

means. 

[0314] Therefore, the service life of the battery for the 
electronic payment card settlement means can be 25 
extended. 

[0315] According to the inventfon cited in claim 142, 
the object is one whereon or wherein electronic pay- 
ment card installation information, electronic telephone 
card Installation inforrr^tion, or electronic ticket installa- 30 
Won information is printed or engraved in a form reada- 
ble by a person or reacting means. 
[0316] Therefore, the electronic payment card, the 
electronic telephone card or the electronic ticket can be 
physically distritsuted akxig a distrbution route. 35 
[0317] According to the invention cited in claim 143, a 
coating is applied to a portion of the object whereon or 
wherein the electronic payment card installation infor- 
mation, the electronic telephone card installation infor- 
matfon or the electronic ticket installation informatfon is 40 
printed or engraved in order to disable the reading of the 
electronic payment card installation information, the 
electronic telephone card instailatfon information or the 
electronic ticket installation information. The coating is 
renrK3vat3le. 45 
[0318] Thus, the unauthorized dissemination of instal- 
lation information occurring prior to a purchase can be 
prevented. 

[031 9] According to the invention cited in daim 1 44, to 
prevent holographic counterfeiting, a miao-character or so 
a micro-pattern is printed on or etched in the object. 
[0320] Therefore, the oount&feiting can be prevented. 
[0321] According to the inventkin dted in claim 145, 
on the recording medium, electronic paymerrt card 
installation information, electronic telephone card instal- ss 
lation information, or electronic tk:ket installation infor- 
mation is recorded using a form that can be read by 
recording/reproduction means. 


[0322] Therefore, the electronic payment card, the 
electronic telephone card or the electronic ticket can be 
physically distributed afong a distrfoution route. 
[0323] According to the invention cited in claim 146. 
. on the recording medium, a control program for the cen- 
tral processing unit of the electronic wallet cited in one 
of clainns 28 to 139 is stored in a form readable by a 
computer. Thus, the program can be distributed in a 
portable form. 

[0324] According to the invention cited in claim 147, 
on the recording medium, a control program for the cen- 
tral processing unit of the electronic payment card set- 
tlement means cited in one of claims 29 to 139 is 
recorded in a form readable by a computer. Thus, the 
program can be distributed in a portable form. 
[0325] According to the invention cited in claim 146, 
on the recording medium, a control program for the cen- 
tral processing unit of the electronk; telephone card set* 
tiement means cited in one of daims 32 to 139 is 
recorded in a form readable by a computer. Thus, the 
program can be distributed in a portable form. 
[0326] According to the invention cited in claim 149. 
on the recording medium, a control program for the cen- 
tral processing unit of the electronic ticket examination 
means cited in one of daims 33 to 139 is recorded in a 
form readable by a conrputer. Thus, the program can be 
distributed in a portable form. 
[0327] According to the invention cited in daim 150. 
on the recording medium, a processing program for the 
computer system of the service providing means dted 
in one of daims 34 to 139 is recorded in a fam readable 
by a computer. Thus, tiie program can be distributed in 
a portable form. 

[0328] According to the invention cited in claim 151. 
on the recording medium, a processing program for the 
computer system of the settlement processing means 
dted in one of claims 35 to 139 is recorded in a form 
readable by a computer. Thus, the progam can be dis- 
tributed in a portable form. 

[0329] According to the invention cited in claim 152, 
on the recording medium, a processing program for tiie 
computer system of the payment card issuing means 
dted in one of claims 36 to 139 is recorded in a fam 
readable by a computer. Thus, the program can be dis- 
tritHited in a portable form. 

[0330] According to the invention cited in claim 153, 
on the recording medium, a processing program for tiie 
computer system of ttie telephone card issuing means 
dted in one of claims 37 to 139 is recorded in a form 
readable by a computer. Thus, the program can be dis- 
tributed in a portable form. 

[0331] According to the invention cited in claim 154, 
on the recording medium, a processing program for the 
computer system of the ticket issuing means cited in 
one of daims 38 to 139 is recorded in a form readable 
by a conputer. Thus, tiie program can be distributed in 
a portable form. 
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BRIEF DESCRIPTION OF THE DRAWINGS - 
[0332] 

Fig. 1 is a block diagram illustrating the arrange- s 
ment of a mobite electronic commerce system 
according to one embodiment of the present inven- 
tion; 

Rg. 2A is a diagram for explaining a transfer func- 
tion accading to the embodiment of the present io 
invention; 

Fig. 2B is a diagram for explaining the function of an 
installed card according to the embodiment of the 
present invention; 

Rg. 3A is a schematic front view of a nrKsbile user is 
terminal in a credit card mode according to the 
embodin)ent of the present invention; 
Rg. 38 is a schematic rear view of a mobile user 
terminal in a credit card mode according to the 
embodinnent of the present inverrtion; 20 
Rg. 3C is a schematic front view of a mobile user 
terminal in a ticket nrxxle according to tiie embodi- 
ment of the present invention; 
Rg. 3D is a schematic front view of a mobile user 
terminal in a payment card mode according to the ss 
embodiment of the present invention; 
Rg. 3E is a schennatic front view of a nK)bile user 
terminal in a telephone card mode according to the 
embodinDem of the present invention; 
Rg. 3F is a schematic front view of a mobile user 30 
terminal in the ticket mode according to a modifica- 
tion of the embodiment of the present invention; 
Rg. 30 is a schematic front view of a mobile user 
t&rrvnal in the payment card mode according to a 
nradrfication of the embodiment of the present 35 
invention; 

Rg. 3H is a schematic front view of a mobite user 
terminal in the telephone card mode according to a 
nfKxlification of the embodiment of the present 
irrvention; 40 
Rg. 4 is a schematk; diagram illustrating a gate ter- 
minal according to the embodiment of the present 
invention; 

Rg. 5 is a schematic dia^m illustrating a mer- 
chant terminal according to the embodiment of tiie 4S 
present invention; 

Figs. 6A and 68 are schematic diagrams showing 
merchant terminals (dighal wireless telephone 
type) according to the errtxxliment of the presem 
invention; so 
Rg. 7 is a schematic diagram illustrating an auto- 
matic vending machine according to the embodi- 
ment of the present invention; 
Rg. 8 is a bkxrk diagram illustrating the arrange- 
ment of a switching center according to the embod- ss 
iment of the present irrvention; 
Rg. 9 is a block diagram illustrating the arrange- 
ment of a service system acoorcfing to the emtxxJi- 


ment of the present invention; 
Rg. 10 is a block diagram illustrating a settlement 
system according to the present invention; 
Rg. 11 is a block diagram illustrating a ticket issuing 
system according to the present invention; 
Rg. 12 is a block diagram illustrating a payment 
card issuing system according to the present inven- 
tion; 

Rg. 13 is a block diagram illustrating a telephone 
card issuing system according to the present inven- 
tion; 

Rgs. 14Aand 148 are schematic diagrams illusti^at- 
ing an electronic payment card installation card 
according to the embodiment of ttie present inven- 
tion; 

Rgs. 14C and 14D are schematic diagrams illus- 
trating an electronic telephone card installation card 
according to tiie embodiment of tiie present inven- 
tion; 

Rgs. 14E arxj 14F are schematic diagrams illustrat- 
ing an electronic ticket installation card according to 
the embodiment of the present invention; 
Rg. 15 is a block diagram illustrating the arrange- 
ment of a mobile user terminal acoordirrg to the 
embodinrrent of the present invention; 
Rg. 16A is a diagram illustrating the arrangement of 
an internal register in the mobile user terminal 
according to the embodiment of tiie present inven- 
tion; 

Rg. 168 is a diagram showing the bit field structure 
of an intemjqst register in tiie mobile user terminal 
according to the emtxxliment of tiie present inven- 
tion; 

Rg. 17 is a specific diagram showing a RAM map 
for the motxle user terminal according to tiie 
emtxxliment of the present invention; 
Rg. 18 is a specific diagram showing data that are 
stored in the service data area of the mobile user 
terminal according to ttie embodiment of tiie 
present invention; 

Rg. 19 is a specific diagram showing the data struc- 
ture of an electronic ticket according to the embod- 
iment of the present invention; 
Rg. 20 is a specific diagram showing the data struc- 
ture of an electronic payment card according to the 
embodiment of the present invention; 
Rg. 21 is a specific diagram shewing the data struc- 
ture of an electronic telephone card according to 
tiie emlKxJiment of the present irrvention; 
Rg. 22 is a block diagram illustrating the an-ange- 
ment of a gate terminal according to the embodi- 
ment of the present invention; 
Rg. 23A is a diagram illustrating the anangement of 
an internal register in the gate terminal according to 
ttie embodiment of the present invention; 
Rg. 238 is a diagram showing the bit field structure 
of an intenrupt register in the gate terminal accord- 
ing to the embodiment of the present invention; 
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Fig. 24 is a spedfic diagram showing a RAM map 
for the gate terminal according to the embodiment 
of the present invention; 

Fig. 25 is a specific diagram showing data that are 
stored in the service data area of the gate terminal 5 
according to the embodiment of the present inven- 
tion; 

Fig. 26 is a block diagram iliustrattng the arrange- 
ment of a mercharrt terminal according to the 
enrtx)diment of the present invention; io 
Fig. 27A is a diagram Illustrating the arrangement of 
an internal register in the merchant terminal 
according to the embodiment of the present inven- 
tion; 

Fig. 27B is a diagram showing the bit field structure is 
of an inten-tpt regist©- in the merchant terminal 
according to the embodiment of the present inven- 
tion; 

Fig. 28 is a specific diagram showing a RAM map 
for the merchant terminal according to the embodi- 20 
ment of the present invention; 
Fig. 29 is a specific diagram shewing data that are 
stored In the service data area of the merchant ter- 
minal according to the embodiment of the present 
invention; 2s 
Fig. 30 is a block diagram illustrating the arrange- 
ment of a merchant terminal (digital wireless tele- 
phone type) according to the embodiment of the 
present invention; 

Fig. 3 1 A is a diagram illustrating the arrangement of 30 
an internal register in the merchant terminal (c£gital 
wireless telephone type) according to the emtxxli- 
ment of the present invention; 
Fig. 31 6 is a diagram showing the bit field structure 
of an intenupt register in the merchant terminal 35 
(digital wireless telephone type) according to the 
enrtxxtiment of the present invention; 
Fig. 31 C is a diagram showing the bit fiekl structure 
of a key display register in the merchant terminal 
(digital wireless telephone type) according to the 40 
entxxJiment of the present invention; 
Fig. 32 is a specific diagram showing a RAM map 
for the merchant temninai (digital wireless tele- 
phone type) according to the embodiment of the 
present invention; 45 
Fig. 33 is a specific diagram showing data that are 
stored in the service data area of the merchant ter- 
minal (distal wireless telephone type) according to 
the embodiment of the present invention; 
Fig. 34 is a block diagram Illustrating the arrange- so 
ment of an automatic venc£ng machine according to 
the embodiment of the present invention; 
Fig. 35A is a cfiagram illustrating the arrangement of 
an internal register in the automatic vending 
machine according to the embodiment of the ss 
present invention; 

Fig. 35B is a diagram showing the bit field structure 
of an intempt register in the automatic vending 


machine according to the embodiment of the 
present invention; 

Fig. 36 is a specific diagram showing a RAM map 
for the accounting device according to the embodi- 
ment of the present invention; 
Fig. 37 is a specific diagram showing data that are 
stored in the service data area of the accounting 
device according to the emtxxjiment of the present 
invention; 

Fig. 38 is a bk>ck diagram illustrating tiie arrange- 
ment of an electronic telephone card automatic 
vending machine according to ttie embodimem of 
the present invention; 

Rg. 39 is a specific cfia^am showing a RAM map 
for tiie electronic telephone card accounting device 
according to the embodiment of tiie present inven- 
tion; 

Rg. 40 is a specific diagram showing data that are 
stored in the service data area of tiie electronic tel- 
ephone card accounting device according to the 
embodiment of the present invention; 
Rg. 41 A is afkiwchart showing the digital signature 
processing according to the embodiment of tiie 
present invention; 

Rg. 41 B is a fkiwchart showing tiie digital signature 
processing according to the embodiment of the 
present invention; 

Rg. 42A is a fk)wchart showing tiie message seal- 
ing processing according to tiie embodiment of tiie 
present invention; 

Fig. 42B is a fkTwchart showing the message seal- 
ing processing according to the embodiment of tiie 
present invention; 

Rg. 43A is aflCKvchart showing the closed message 
decryption processing according to the embodi- 
ment of the present invention; 
Rg. 43B is a flowchart showing the closed message 
decryption processing according to tiie embodi- 
ment of the present invention; 
Fig. 44A is a flowchart showing the digital signature 
authentication processing according to the embodi- 
ment of tiie present invention; 
Fig. 44B is a fkiwchart showing the digital signature 
authentication processing according to the emtxxji- 
ment of tiie present invention; 
Fig. 45 is a diagram lor explaining the processing 
architecture of the service system according to tiie 
emtxxiiment of the present invention; 
Fig. 46 is a specific diagram showing data that are 
stored for each user in the user information server 
of tiie service system according to tiie embodiment 
of the present inventk)n; 

Rg. 47 is a specific diagram showing data that are 
stored in the merchant information server of the 
servk:e system for one gate terminal, merchant ter- 
minals 102 and 103. tiie accounting device, and the 
electronic telephone card accounting device; 
Rg. 48 is a specific diagram showing data, for each 
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transaction processor, that are stored in the trans- 
action processor information server of the service 
system according to the embodiment of the present 
invention; 

Fig. 49 is a specific diagram showing data, for each s 
ticket issuer, that are stored in the ticket issuer infor- 
mation server of the service system according to 
the emtxxfiment of the present invention; 
Fig. 50 is a specific diagram showing data, for each 
payment card issuer, that are stored in the payment io 
card issuer information server of the service system 
according to the embodimem of the present inven- 
tion; 

Fig. 51 is a specific diagram showing data, for each 
telephone card issuer, thiat are stored in the tele- is 
phone card issuer information server of the s^ice 
system accading to the embodiment of the present 
invention; 

Figs. 52A to 52G are specific diagrams showing a 
user list a merchant list, a transaction processor 20 
list, a ticket issuer list, a payment card issuer list a 
telephone card issuer list and a provided service 
list, all of which are stored in the service director 
information server of the service system according 
to the embodiment of the present invention; ss 
Fig. 53 is a specific diagram showing data, for each 
electronic ticket, that are stored in tiie service direc- 
tor information server of the service system accord- 
ing to the entodiment of the present invention; 
Fig. 54 Is a specific diagram showing data, for each 30 
electronic payment card, that are stored in the serv- 
ice director information server of the service system 
according to the embodimerrt of the present inven- 
tion; 

Rg. 55 is a specific diagram showing data, for each 35 
electronic telephone card, that are stored in the 
service director information server of the service 
system according to the embodiment of the present 
invention; 

Fig. 56A is a flowchart showing a remote access 40 
process perfbmied by the mobile user terminal and 
the user processor according to the emtxxiiment of 
the preserrt invention; 

Fig. 56B is a flowchart showing a data update proc- 
ess performed by the mot>ile user terminal and the 4S 
user processor according to the embodiment of the 
present invention; 

Fig. 56C is a flowchart showing a forcible data 
update process performed by the mobile user ter- 
minal and tiie user processor according to the so 
embodiment of the present invention; 
Rg. 56D is a flowchart showing a data backup proc- 
ess performed t>y the mobile user terminal and the 
user processor according to the embodiment of the 
present invention; 55 
Rg. 57A is a flowchart showing a remote access 
process perfamed by the gate tenminal (or the mer- 
chant terminal 102 or 103. the accounting device. 


or the electronic telephone card accounting device) 
and the merchant processor; 
Rg. 57B is a flowchart showing a data ipdate proc- 
ess performed by the gate terminal (or the mer- 
chant terminal 102 or 103, the accounting device, 
or tiie electronic telephone card accounting device) 
an6 the merchant processor; 
Rg. 57C is a flowchart showing a forcible data 
ipdate process performed by the gate terminal (or 
the merchant terminal 102 or 103. the accounting 
device, or the electronic telephone card accounting 
device) and the merchant processor; 
Rg. 57D is a flowchart showing a data backup proc- 
ess performed by the gate terminal (or the mer- 
chant terminal 102 or 103. the accounting device, 
or the electronic telephone card accounting device) 
and the merchant processor; 
Rg. 58 is a flowchart showing ticket order process- 
ing according to the embodiment of the present 
invention; 

Rg. 59 is a flowchart showing ticket purchase 
processing (spontaneous settlement) according to 
the emtxxiiment of the present inverrtion; 
Rg. 60 is a flowchart showing ticket purchase 
processing (delayed settiement) accordtr)g to tiie 
emtXKliment of the present inverrtion; 
Rg. 61 is a flowchart showing payment card pur- 
chase processing (spontaneous settiement) 
according to the embodiment of the present inven- 
tion; 

Rg. 62 is a flowchart showing payment card pur- 
chase processing (delayed settiement) according to 
the embodimerrt of the present invention; 
Rg. 63 is a flowchart showing telephone card pur- 
chase processing (spontaneous settiement) 
according to the embodimerrt of the present inven- 
tion; 

Rg. 64 is a ftowchart showing telephone card pur- 
chase processing (delayed settiement) according to 
tire enrbodimerrt of the present invention; 
Rg. 65A is a f k)wchart showing ticket registration 
processing according to the enrbodiment of the 
present invention; 

Rg. 65B is a flowchart showing payment card regis- 
tiBtion processing according to the embodiment of 
tiie present invention; 

Rg. 65C is a flowchart showing the telephone card 
registration processing according to the embodi- 
ment of the present invention; 
Rg. 66 is a flowchart showing ticket setup process- 
ing according to tiie embodiment of the present 
invention; 

Rg. 67 is a flowchart showing ticket examination 
processing according to the emtxxliment of the 
present inverrtion; 

Rg. 68 is a flowchart showing payment card settie- 
ment processing performed by the mobile user ter- 
minal and the merchant terminal 102 (a the 
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merchant terminal 103) according to the enrtfxxji- 
ment of the present invention; 
Fig. 69 is a flowchart shewing payment card settle- 
ment processing performed by the mobile user ter- 
minal and the automatic vending machine s - 
according to the embodiment of the present inven- 
tion; 

Fig. 70 is a flowchart showing telephone card set- 
tlement processing acc(»xling to the embodiment of 
the present invention; io 
Fig. 71 is a flowchart showing ticket reference 
processing according to the embodiment of the 
present invention; 

Fig. 72 is a flowchart showing payment card refer- 
ence processing according to the ennbodinrient of 75 
the present invention; 

Fig. 73 is a flowchart showing telephone card refer- 
ence processing according to the embodiment of 
the present invention; 

Fig. 74 is a flowchart showing ticket tr^isfer 20 
processing according to the embodiment of the 
present invention; 

Fig. 75 is a f k)wchart showing payment card trans- 
fer processing according to the embodiment of the 
present invention; 2S 
Fig. 76 is a flowchart showing telephone card trans- 
fer processing according to the embodiment of the 
present invention; 

Fig. 77 is a flowchart shewing electronic ticket 
installation processing according to the embodi- 30 
ment of the present invention: 
Ftg. 78 is a fIcMrchart showing electronic payment 
card installation processing according to the 
embodiment of the present invention; 
Fig. 79 is a flowchart showing electronic telephone 35 
card installation processing according to the 
embodiment of the present invention: 
Fig. 80 is a flowchart showing ticket mocfification 
processing for the gate terminal according to the 
enrtxxliment of the present invention; 4o 
Fig. 81 is a flowchart showing ticket modification 
processing for the mobile user terminal according 
to the emtKxjiment of the present invention; 
Fig. 82 is a flowchart showing ticket refund process- 
ing (spontaneous settlement) according to the 45 
embodiment of the present invention; 
Fig. 83 is a flowchart showing ticket refund process- 
ing (delayed settlement) according to the embodi- 
ment of the present invention; 
Fig. 84 is a flowchart showing real credit settlement so 
processing according to the embodiment of the 
present invention; 

Fig. 85A is a specifrc diagram showing the data 
structure of a remote access request that is 
exchanged between the mobile user terminal and 55 
the gate terminal according to the embodiment of 
the present invention; 

Fig. 85B is a specific diagram showing the structure 


of remote access data that are exchanged between 
the mobile user terminal and the user processor 
according to the embodiment of the present inven- 
tion; 

Fig. 86A is a specific diagram showing the data 
structure of a remote access request that is 
exchanged between the gate terminal (or the mer- 
chant tenminal 102 or 103) and the merchant proc- 
essor according to the embodiment of the present 
invention: 

Rg. 86B is a specific diagram showing the structure 
of remote access data that are exchanged between 
the gate terminal (or the merchant terminal 102 or 
103) and the merchant processor according to the 
embodiment of the present invention; 
Fig. 87A is a specific diagram showing the data 
structure of a data update request that is 
exchanged between the nx)bile user terminal and 
the user processor according to the embodiment of 
the present invention: 

Rg. 87B is a specific diagram showing the data 
structure of a data ipdate response that is 
exchanged between the mobile user terminal and 
the user processor according to the embodiment of 
the present invention: 

Fig. 87C is a specific diagram showing the structure 
of upk>ad data that are exchanged between the 
nxibile user terminal and the user processor 
according to the embodiment of the present inven- 
tion; 

Fig. 87D is a specific diagram showing the structure 
of update data that are exchanged between the 
mobile user terminal and the user processor 
according to the embodiment of the present inven- 
tion; 

Fig. 87E is a specific diagram showing the data 
structure of a mandatory expiration that is 
exchanged between the mobile user terminal and 
the user processor according to the eni>odiment of 
the present invention; 

Fig. 87F is a specific diagram showing the data 
structure of a data update instruction that is 
exchanged between the mobile user terminal and 
the user processor according to the embodiment of 
the present inverrtion; 

Fig. 88A is a specific diagram showing the data 
structure of a data update request that is 
exchanged between the gate terminal (the mer- 
chant terminal 102 or 103. the accounting device, 
or the electronic telephone accounting device) and 
the merchant processor according to the embodi- 
ment of the present invention; 
Fig. 88B is a specific diagram showing the data 
structure of a data ipdate response that is 
exchanged between the gate terminal (the mer- 
chant temiinat 102 or 103. the accounting device, 
or the electronic telephone card accounting device) 
and the merchant processor according to the 
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embodiment of the present invention; 
Fig. 88C is a specific diagram showing the structure 
of upload data that are exchanged between the 
gate terminal (the merchant terminal 102 or 103, 
the accounting-device, or the electronic telephone s 
accounting device) and the merchant processor 
according to the embodiment of the present inven- 
tion; 

Rg. 88D is a specific diagram showing the structure 
of update data that are exchanged between the io 
gate terminal (the merchant terminal 102 or 103. 
the accounting device, or the ^ectronic telephone 
card accounting device) and the mercharrt proces- 
sor according to the embodiment of the present 
invention; is 
Rg. 88E is a specific diagram showing the data 
structure of a mandatory expiration that is 
exchanged t>etween the gate terminal (the mer- 
chant terminal 102 or 103. the accounting device, 
or the electronic telephone accourrting device) and 20 
the merchant processor according to the embodi- 
ment of the present invention; 
Rg. 86F is a specific diagram showing the data 
structure of a data ijpdate instruction that is 
exchanged between the gate terminal (the mer- ss 
chant terminal 102 or 103. the accounting device, 
or the electronic telephone card accounting device) 
and the merchant processor according to the 
embodiment of the present invention; 
Rg. 89A is a specific diagram showing the data 30 
structure of a ticket order that is transmitted, during 
the ticket order processing, from the mobile user 
terminal to the service system according to the 
embodiment of the present invention; 
Fig. 89B is a specific diagram showing the data 35 
structure of a ticket order that is transmitted, during 
the ticket order processing, from the service system 
to the ticket issuing system according to the 
emtxxiimerTt of the present invention; 
Fig. 90A is a specific diagram showing the data 40 
structure of a ticket order response that is transmit- 
ted, during the ticket order processing, from tiie 
ticket issuing system to the sen/ice system accord- 
ing to the emtxxliment of the present invention; 
Rg. 90B is a specific diagram showing the data 4s 
structure of a ticket order response that is transmit- 
ted, during the ticket order processing, from the 
service system to the mobile user terminal accord- 
ing to the emtxxliment of the present invention; 
Rg. 91 A is a specific diagram showing the data so 
structure of a ticket purchase order that is transmit- 
ted, during the ticket purchase processing, from tiie 
mobile user terminal to the servk;e system accord- 
ing to the embodimerrt of the present invention; 
Fig. 91 B is a specific diagram showing the data ss 
structure of a ticket purchase order that is transmit- 
ted, during the ticket purchase processing, from tiie 
service system to the ticket issuing system accord- 


ing to the embodiment of the present invention; 
Rg. 92A is a specific diagram showing the data 
structure of an electronic ticket issuing commission 
for the ticket purchase processing according to the 
embodiment of the present inverrtion; 
Rg. 92B is a specific diagram showing the data 
structure for an electronic ticket issuing in the ticket 
purchase processing according to the embodiment 
of the present invention; 

Rg. 93A is a specific diagram showing the data 
structure of a temporary receipt for the ticket pur- 
chase processing according to tiie embodiment of 
the present invention; 

Rg. 93B is a specific diagram showing the data 
structure of a clearing request in the ticket purchase 
processing according to the embodiment of the 
present invention; 

Rg. 94A is a specific diagram showing the data 
structure of a clearing conrptetion notification that is 
tiBnsmitted. in the ticket purchase processing, from 
tiie settiement sy^em to tiie service system 
according to the embodiment of tiie present inven- 
tion; 

Rg. 94B is a specific diagram showing the data 
structure of a clearing completk)n notification that is 
transmitted, in the ticket purchase processing, from 
the servk^e system to the ticket issuing system 
according to the emt)odiment of the present inven- 
tion; 

Rg. 95A is a specific diagram showing tiie data 
structure of a receipt tiiat is transmitted, in tiie ticket 
purchase processing, from the ticket issuing sys- 
tem to the service system according to the embod- 
iment of the present invention; 
Rg. 95B is a specific diagram showing the data 
structure of a receipt tiiat is transmitted, in tiie ticket 
purchase processing, from the service system to 
tiie mobile user terminal according to the emtxxii- 
ment of the present invention; 
Rg. 96A is a specific diagram showing tiie data 
structure of a payment card purchase order that is 
tiansmitted from the mobile user terminal to the 
service system according to the enr^txxliment of tiie 
present invention; 

Rg. 95B is a specific diagram showing the data 
structure of a payment card purchase order that is 
transmitted, during the payment card purchase 
processing, from tiie service system to the payment 
card issuing system according to the embodiment 
of tiie present invention; 

Rg. 97A is a specific diagram showing the data 
structure of an electronic payment card issuing 
commission for the paymerrt card purchase 
processing according to the emtxxjiment of the 
present inverrtion; 

Rg. 97B is a specific diagram showing the data 
structure of electronic payment card issuing data 
for the payment card purchase processing accord- 
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ing to the embodiment of the present invention; 
Fig. 98A is a specific diagram showing the data 
structure of a temporary receipt for the payment 
card purchase processing according to the embod- 
iment of the present invention; s 
Fig. 98B is a specific diagram showing the data 
structure of a clearing request in the payment card 
purchase processing according to the embodiment 
of the present invention; 

Fig. 99A is a specific diagram shewing the data 10 
structure of a clearing completion notification that is 
transmitted, in the payment card purchase process- 
ing, from the settlement system to the sendee sys- 
tem according to the errtxxitment of the present 
invention: 15 
Fig. 99B is a specific diagram showing the data 
structure of a clearing completion notification that is 
transmitted, in the payment card purchase process- 
ing, from the service system to the payment card 
issuing system according to the embodiment of the 20 
present invention: 

Fig. 100 A is a specific diagram showing the data 
structure of a receipt that is transmitted, in the pay- 
ment card purchase processing, from the payment 
card issuing system to the service system accord- ss 
ing to the embodiment of the present invention; 
Fig. 100B is a specif ic diagram showing the data 
structure of a receipt that is transmitted, in the pay- 
ment card purchase processing, from the service 
system to the nmbile user terminal according to the 30 
embodiment of ttie present Invention; 
Fig. 101 A is a specific diagram showing the data 
structure of a telephone card purchase order that is 
transmitted from the mobile user temiinal to the 
service system according to ttie embocfiment of the 35 
present invention; 

Fig. 1018 is a specific diagram showing the data 
structure of a telephone card purchase order that Is 
transmitted, during the payment card purchase 
processing, from the sendee system to the tele- 40 
phone card issuing system according to the embod- 
iment of the present invention; 
Fig. 102A is a specific diagram showing ttie data 
structure of an electronic telephone card issuing 
commission for the telephone card purchase 45 
processing according to the embodiment of ttie 
present invention; 

Fig. 1038 is a specific diagram showing the data 
sttucture of an electronic telephone issuing in the 
telephone card purchase processing according to so 
the embodiment of ttie present Invention; 
Fig. 104A is a specific diagram showing ttie data 
structure of a temporary receipt for the telephone 
card purchase processing according to ttie embod- 
iment of the present invention ; 55 
Fig. 1038 is a specific diagram showing tiie data 
structure of a clearing request In ttie telephone card 
purchase processing according to ttie embodiment 


of the presem invention; 

Rg. 105A is a specific diagram showing the data 
structure of a clearing completion notification that is 
transmitted. In the telephone card purchase 
processing, from the settlement system to the serv- 
ice system according to the embodiment of the 
present invention; 

Fig. 1048 is a specific diagram showing the data 
structure of a clearing conpletion notification that is 
ttansmitted. In ttie telephone card purchase 
processing, from ttie service system to the tele- 
phone card issuing system according to the embod- 
iment of the present invention; 
Fig. 106A is a specific diagram showing the data 
structure of a receipt that is transmitted, in the tele- 
phone card purchase processing, from the tele- 
phone card issuing system to the service system 
according to ttie embodiment of ttie present inven- 
tion: 

Rg. 1058 is a specific diagram showing the data 
structure of a receipt that is transmitted, in the tele- 
phone card purchase processing, from ttie sendee 
system to the mobile user terminal according to ttie 
embodiment of the present invention; 
Fig. 107A is a specific diagram showing the data 
structure of a ticket registration request for the ticket 
registration processing according to the emtxxii- 
ment of tiie present Invention; 
Rg. 1068 is a specific diagram showing the data 
structure of a ticket certificate issuing in ttie ticket 
registration processing according to the embodi- 
ment of tiie present invention; 
Rg. 108 A is a specific diagram showing the data 
structure of a payment card registration request for 
the payment card registration processing according 
to the embodiment of the present invention; 
Rg. 1078 is a specific diagram showing the data 
structure of payment card certificate issuing in ttie 
payment card registration processing according to 
the embodiment of ttie present invention; 
Rg. 109A is a specific diagram showing the data 
structure of a telephone card registration request 
for the telephone card registration processing 
according to the embodiment of ttie present inven- 
tion; 

Fig. 1088 is a specific diagram showing the data 
structure of telephone card certificate issuing in tiie 
telephone card registration processing according to 
the embodiment of ttie present invention; 
Fig. 11 OA is a specific diagram showing the data 
structure of an examination object ticket request for 
the ticket setup processing according to the embod- 
iment of the present invention; 
Rg. 1098 is a specific diagram showing the data 
structure of an examination object ticket for ttie 
ticket setup processing according to ttie embodi- 
ment of the present invention: 
Rg. 111 A is a specific diagram showing tiie data 
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structure of a ticket presentation for the ticket exam- 
ination processing according to the emtxxjiment of 
the present inventk>n: 

Rg. 1 1 0B is a specific diagram showing the struc- 
ture of ticket examination data for the ticket exami- s 
nation processing according to the embodiment of 
the present invention; 

Fig. tl2A is a spedfic diagram showing the data 
structure of a ticket examinatk)n response for the 
ticket exarrnnation processing according to the io 
emtxxjinf)ent of the present invention; 
Fig. Ill B is a specific diagram showing the data 
structure of an examination certificate for the ticket 
examination processing according to the embodi- 
ment of the preserTt invention; 75 
Fig. 113A is a specific diagram showing the data 
sbucture of a payment offer for the payment card 
settiement processing according to the embodi- 
ment of the present invention; 
Rg. 112B is a specific diagram showing the data 20 
structure of a payment offer response for the pay- 
ment card settiement processing according to the 
embodinrtent of the present invention; 
Rg. 1 14A is a specific diagram showing the data 
sbucture of a micro-check for the payment card set- ss 
tiement processing according to the embodiment of 
the present inventfon; 

Rg. 1 13B is a specific diagram showing the data 
structure of a receipt for tiie payment card settle- 
ment processirtg according to the embodiment of 30 
the present inventkxi; 

Rg. 115A is a specific diagram showing the data 
structure of a micro-check call request tor the tele- 
phone card settiement processing according to the 
embodiment of the present invention; 35 
Rg. 114B is a spedfic diagram showing the data 
structure of a micro-check call response for the tel- 
ephone card settiement processing according to 
the embodiment of the present inverttbn; 
Rg. 116A is a specific diagram showing the data 40 
structure of a telephone micro-check for the tele- 
phone card settiement processing according to the 
embodiment of the present invention; 
Fig. 115B is a specific diagrgun showing the data 
structure of a receipt for the telephone card settle- 4S 
ment processing according to the embodiment of 
the present invention; 

Rg. 1150 is a specific diagram showing the data 
structure of a communication charge for the tele- 
phone card settiement processing according to the so 
embodiment of the present invention; 
Rg. 117A is a specific diagram showing the data 
structure of a usage report for the ticket reference 
processing according to the embodiment of the 
present invention; 55 
Rg. 1168 is a spedfic diagram showing the data 
stiiicture of a usage report for the payment card ref- 
erence processing according to the embodiment of 


the present invention; 

Rg. 11 60 is a specific diagram showing the data 
structure of a usage report for the telephone card 
reference processing according to the embodiment 
of the present invention; 

Rg. 118A is a specific diagram showing the data 
structure of a ticket transfer offer tor the ticket trans- 
fer processing according to the emtxxllment of the 
present invention; 

Rg. 117B is a specific diagram showing the data 
structure of a ticket transfer offer response for the 
ticket transfer processing according to tiie embodi- 
ment of the present invention; 
Rg. 1 19A is a spedfic diagram showing the data 
structure of a ticket transfer certif k:ate for the ticket 
transfer processing according to the emtxxiiment of 
the present invention; 

Rg. 118B is a spedfic diagram showing the data 
structure of a ticket transfer receipt for the ticket 
transfer processing according to the embodiment of 
tfie present invention; 

Rg. 120A is a spedfic dia^-am showing the data 
structure of a ticket transfer request for the ticket 
transfer processing according to the embodiment of 
the present invention; 

Rg. 119B is a specific diagram showing the data 
structure of a ticket transfer for the ticket tranter 
processing according to the embodiment of tiie 
present invention; 

Rg. 121 A is a spedfic diagram showing the data 
structure of a card transfer offer for the payment 
card or the telephone card transfer processing 
according to the embodiment of tiie present inven- 
tion; 

Rg. 120B is a spedfic diagram showing the data 
structure of a card transfer offer response for the 
payment card or the telephone card transfer 
processing according to the emk>odiment of tiie 
present invention; 

Rg. 122A is a spedfic diagram showing the data 
structure of a card transfer certificate for tiie ticket 
transfer processing according to the emtxxJiment of 
the present irrvention; 

Rg. 121 B is a specific diagram showing the data 
structure of a card transfer receipt for the ticket 
tiansfer processing according to the embodiment of 
tiie present invention; 

Rg. 123 A is a spedfic diagram showing the data 
structure of a card transfer request for the payment 
card or the telephone card tiansfer processing 
according to the emtxxjiment of the pu'esent inven- 
tion; 

Rg. 122B is a spedfic diagram showing the data 
structure of a payment card transfer for the payment 
card transfer processing according to the emtxxii- 
ment of the present invention; 
Rg. 1220 is a specific diagram showing the data 
structure of a telephone card transfer for tiie tele- 
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phone card transfer processing according to the 
enifc>odiment of the present invention; 
Fig. 124 A is a specific diagram showing the data 
structure of an electronic ticket installation 
sion for the electronic ticket installation processing s 
according to the embodiment of the present inven- 
tion; 

Fig. 123B is a specific diagram showing the data 
structure of a ticket installation conrvnissk>n for the 
electronic ticket installation processing according to io 
the embodiment of the present invention; 
Fig. 125A is a specific diagram showing the data 
structure of an electronic ticket installatk)n commis- 
sion for the electronic ticket installation processing 
according to the errbodiment of the present inven- is 
tk)n; 

Fig. 124B is a specific diagram showing the struc- 
ture of electronic ticket installatk>n data for tiie elec- 
tronic ticket installatk>n processing according to the 
embodiment of the present inventkxi; 20 
Fig. 126A is a specif k; diagram showing the data 
structure of an electronk; payment card installation 
commission for the electronic payment card instal- 
latk)n processing according to the embodiment of 
the present invention; ss 
Fig. 125B is a specific diagram showing the data 
structure of a payment card installation commission 
request for the electronk; payment card installation 
processing according to the embodiment of the 
present invention; 30 
Fig. 127A is a specif k: diagram showing the data 
structure of an etectronk; payment card installation 
commission for the electronic payment card instal- 
latwn processing according to the embodiment of 
the present invention; 35 
Fig. 126B is a specific diagram showing the struc- 
ture of electronic payment card installation data for 
the electronic payment card installation processing 
according to the embodiment of the present inven- 
tk>n; 40 
Fig. 128 A is a specify diagram showing the data 
structure of an electronic telephone card installa- 
tk)n commissk)n for the electronic telephone card 
installation processing according to the embodi- 
ment of the present invention; 4S 
Fig. 127B is a specif k; diagram showing the data 
structure of a telephone card installation commis- 
sion request for the electronic telephone card 
installation processing according to the embodi- 
ment of the present inverttion; so 
Fig. 129A is a specif k: diagram showing tiie data 
structure of an electronic telephone card installa- 
tk>n commissbn for the electronic telephone card 
installation processing according to the entoJi- 
ment of tiie present inverttion; 55 
Fig. 128B is a specif k: diagram showing the data 
structure of electronic telephone card installation 
data: 


Fig. 130 A is a specific diagram showing the data 
structure of a modrf k:ation request for the electronic 
telephone card installation processing according to 
the embodiment of the present invention: 
Fig. 129B is a specific diagram showing the data 
structure of a nxxjrfication notification according to 
the embodiment of tiie present invention; 
Fig. 131A is a specific diagram showing tiie struc- 
ture of reaction selection data according to the 
emtxxiiment of the present invention; 
Fig. 130B is a specific diagram showing the data 
structure of a modification instruction according to 
the embodiment of the present invention: 
Rg. 132A is a specifk: diagram showing the data 
structure of a refund request accord ng to the 
embodiment of the present invention; 
Fig. 131 B is a specifk: diagram showing the data 
structure of a refund commissbn according to the 
embodiment of tiie present invention; 
Fig. 133 A is a specifk; diagram showing the data 
structure of a terrporary refund receipt according to 
the embodiment of the present invention; 
Rg. 132B is a specifk: diagram showing the data 
structure of a refund clearing receipt according to 
the embodiment of the present invention; 
Fig. 134A is a specifk; diagram showing the data 
structure of a refund clearing completion notifica- 
tion tiiat is transmitted from the settlement system 
to tiie servrce system according to the embodiment 
of the present invention; 

Fig. 133B is a specific diagram showing the data 
structure of a refund clearing completion rKrtifica- 
tion tiiat is transmitted from the service system to 
the trcket issuing system according to the embodi- 
ment of the present invention; 
Fig. 135A is a specific diagram showing the data 
structure of a r^nd receipt that is transmitted from 
the ticket issuing system to tiie sen^k^e system 
according to the embodiment of tiie present inven- 
tion; 

Fig. 134B is a specifk; diagram showing the data 
structure of a r^nd receipt that is transmitted from 
the service system to the mobile user terminal 
according to the embodiment of the present inven- 
tk)n; 

Fig. 136A is a specific diagram showing the data 
structure of a payment offer for tiie real credit settf e- 
ment processing according to the embodiment of 
the present invention; 

Fig. 135B is a specific diagram showing the data 

structure of a payment offer response for the real 

aedit settiement processing according to tiie 

entoodiment of the present invention; 

Fig. 135C is a specific diagram showing tiie data 

structure of an authorization request for the real 

credit settiement processing according to the 

embodiment of tiie present invention; 

Fig. 135D is a specific diagram showing the data 
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Structure of a payment request for the real credit 
settlement processing according to the embodi- 
ment of the present invention; 
Rg. 135E is a specific diagram showing the data 
structure of an authorization response fa the real s 
credit settlement processing according to the 
emtxxiiment of the present invention; 
Fig. 135F is a specific diagram showing the data 
structure of a clearing request that is transmitted, in 
the real aedit settlement processing, from the mer- 10 
chant terminal to the sendee system according to 
the emk)odiment of the present inv^ion; 
Rg. 137A is a specific diagram showing the data 
structure of a clearing request that is transmitted, in 
the real credt settlement processing, from the serv- 75 
ice system to the transaction processing system 
according to the embodiment of the present inven- 
tion: 

Rg. 136B is a specific diagram showing the data 
structure of a clearing completion notification that is zo 
transmitted, in the real aedit settlement process- 
ing, from the transaction processing system to the 
service system according to the embodiment of the 
present invention; 

Rg. 136C is a specific diagram showing the data ss 
structure of a clearing completion notification that is 
transmitted, in the real aedit settlement process- 
ing, from the service system to the merchant termi- 
nal accading to the embodiment of the present 
invention; 30 
Rg. 138A is a specific diagram showing the data 
structure of a receipt that is transmitted, in the real 
credit settlement processing, from the merchant 
terminal to the service system accading to the 
enrtodinient of the present invention; 35 
Rg. 137B is a specific diagram showing the data 
structure of a receipt that is transmitted, in the real 
credit settlement processing, from the service sys- 
tem to the mot>ile user terminal aooording to the 
embodinient of the present invention; 40 
Rg. 139A is a diagram for explaining a conventional 
settlement system that employs a prepayment 
method using a payment card; 
Rg. 138B is a diagram for explaining a conventional 
ticket selling system; 45 
Rg. 139A is a front view of a mobile user terminal 
according to a second embodiment of the present 
invention; 

Rg. 1398 is a rear view of the vnobWe user terminal 
according to the second embodimem of the presem so 
invention; 

Rg. 140 is a tiock diagram illustrating the arrange- 
ment of the mobile user terminal according to the 
second embodiment of the present invention; 
Rg. 141 A is a front view of a mobile user terminal ss 
according to a third embodiment of tiie present 
invention; 

Rg. 1418 is a rear view of tiie mobWe user teimnal 


according to tiie tiiird emtxxliment of the present 
invention; 

Rg. 141 C is a front view of the mobile user terminal 

In a digital telephone mode where an IC card is not 

attached to the mobile user terminal according to 

tiie third embodiment of the present invention, and 

a schematic diagram for tiie IC card; 

Rg. 141 D is a front view of the mobile user terminal 

in a aedit card mode where the IC card is attached 

to the mok)ile user terminal according to the third 

embodiment of the present invention: 

Rg. 142 is a block diagram illustrating the anrange- 

ment of the mobile user terminal according to the 

third embodiment of the present inverrtion; 

Rg. 143 is a block diagram illustrating the an^ange- 

ment of the IC card according to the tNrd emt>odi- 

ment of the present invention; and 

Rg. 144 is a specif k; diagram showing an FeRAM 

memay map for the IC card according to the third 

embodiment of the present invention. 

[0333] The reference numerals used in the drawings 
are as foifows: 

100, 200: mobile user terminal 

101: gate terminal 

102: merchant terminal 

103: merchant terminal 

104: automatic vending machine 

105. 202: switching center 

106: settlement system 

107: ticket issuing system 

108: payment card issuing system 

109: telephone card issuing system 

110: service system 

111: digital public line netwak 

112, 113,114, 201: base station 

115: telephone terminal 

207: installation card 

300, 400, 501, 60. 700: infrared communication 
module (infrared communication pat) 

301, 601. 701: antenna 

302, 602: receiver/loudspeaker 

303, 502, 603: LCD 

304, 504, 604: mode switch 

305, 605: speech switch 

306, 606: end switch 

307, 506, 607; function switch 

308, 403, 507, 608: number key switch 

309, 402, 509, 61 1 : power switch 

310, 609: microphone 

31 1 , 508. 612: execution switch 

312, 613: headphone jack 

313, 314. 315: image display portion 
401, 702: touch panel LCD 

404: menu switch 
405: lock switch 
406, 510: serial cable 
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503: telephone fandset 
505: hook switch 
511: cash register 

512: payment card settlement switch 
513: credit clearing switch s 
514: RS-232Ccat>le 
610: bar code reader 
614: card slot 
703: discharge port 

704: product selection switch io 
705: sold out display (LED) 
706: sanple 

800: electronic telephone card accounting device 
801: switch 

802: data processor is 

803: modulator/demodulator 

804: base station controller 

900: service server 

901 : server director information server 

902: user information server 20 

903: merchant information server 

904: transaction processor information server 

905: ticket issuer information server 

906: payment card issuer information sender 

907: telephone card issuer information server 2s 

908. 1006, 1106. 1206. 1306: management system 

909. 910. 1004. 1007, 1104, 1107. 1204, 1207, 

1304, 1307: ATM-LAN switch 

91 1. 1005. 1 105, 1205, 1305: ATM switch 

1 000: transaction server 30 

1001: subscriber information server 

1002: member store information server 

1003: transaction information serv^ 

1 100: ticket issuing server 

1 101. 1201 , 1301 : customer information server 35 

1 102: ticket issuing information server 

1 103: ticket information server 

1200: paymerrt card issuing server 

1202: paymerrt card issuing information server 

1 203: paymerrt card information server 40 

1300: telephone card issuing server 

1302: telephone card issuing information server 

1303: telephone card information server 

1400: electronic paynwnt card installation card 

1401 : electronic telephone card installation card 4S 

1402: electronic ticket installation card 

1406. 1412, 1418: hofographic logo 

1407. 1413. 1419: installation card number 

1408. 1414. 1420: installation number 

1500. 2200, 2600. 3000, 3400, 3800: CPU so 

1501. 2201, 2601. 3001, 3401, 3801: ROM 

1502. 2202, 2602. 3002, 3402. 3802: RAM 

1503. 2204, 2604. 3003, 3403. 3804: EEPROM 

1504. 2605, 3004: LCD controller 

1 505. 2205. 2606. 3005. 3404. 3805: cryptographic ss 
processor 

1506. 2206. 2607, 3006, 3405, 3806: data codec 
1508. 2214, 2610. 3008, 3407: control logic unit 


1509, 2212, 2611, 3009: key operator 

1510, 2211, 2612, 3010, 3415: budspeaker 

151 1 , 2413. 2613. 301 1 : audio processor 

1512, 2414. 2614, 3012: audio codec 

1513, 2415, 2615, 3013. 3408: channel codec 

1514, 3014. 3409: modulator 

1515, 3015. 3410: demodulator 

1516, 3016, 3412: PLL 

1517, 3017. 341 1:RF unit 

1518. 3018: battery capacity detector 
1600, 3100, 3500: frame counter 
1601. 3101. 3501: start frame counter 

1602, 2300, 2700, 3102, 3502: clock counter 

1603, 2301 . 2701 , 3103. 3503: update time register 

1604, 2302. 2702, 3104, 3504: interrupt register 

1605, 2307, 2703. 3105. 3505: ID register 

1606, 2704. 3106, 3506: channel codec control reg- 
ister 

1607, 2705, 3107: audfo transmission buffer 

1608, 2706. 3108: audio reception buffer 

1609. 2707. 3109. 3507: data transmissfon buffer 
1610. 2708. 31 10. 3508: data reception buffer 
1611. 2303. 2709, 3111: audio processor control 
register 

1612, 2306, 2710, 3112: key operator control regis- 
ter 

1613, 2711, 31 13: audio data encryption key regis- 
ter 

2203, 2603. 3803: hard disk 

2207: digital telephone communication unit 

2208. 2608: serial/parallel converter 

2209, 2609: serial port 

2210: sound controller 

2213: external Interface 

2304: X coordinate register 

2305: Y coordinate register 

2308: phone communication control register 

2616: digital communication adaptor 

2617: RS-232C interface 

3059: memory card 

31 14: key display register 

3413, 3807: external interface 

3414: control fogtc unit 

3416: price calculator 

3417: product manager 

3418: product output mechanism 

3419: CD-ROM drive 

3456: sales mechanism 

3455: accounting equipment 

13800: payment card 

13801 : payment card terminal 

13802. 13818: center system 

13816: ticket 

13817: ticket selling terminal 


34 


67 


EP0950 968A1 


68 


BEST MODES FOR CARRYING OUT THE INVEN- 
TION 

[0334] The best mode of the present invention will now 
be described while referring to Figs. 1 to 137. s 
[0335] In an electronic commerce system accading to 
one embodiment of the present invention, a user (indi- 
vidual consumer) purchases, as electronic information, 
various types of tickets, payment cards or telephone 
cards through a network. Thereafter, wireless communi- io 
cation is employed for the examination of a ticket when 
the user enters a hall, for a transaction when the user 
employs a payment card to purchase a product or to 
obtain a service, or for a settlement process when the 
user employs a telephone card to settle a charge is 
incurred by the use of the wireless telephone communi- 
cation service. Therefore, this system does not require 
that a ticket be submitted to an usher for examination, or 
that cash and a receipt be directly exchanged with a 
clerk at a retail shop when a product is purchased, or 20 
that a SIM Card (Subscriber Identify Module Card) be 
installed In a wireless telephone terminal, such as a 
portable telephone or a PHS. to monitor calls initiated at 
the wireless telephone termjnal. 

[0336] In this specification, this system is called an 2S 
"electronic commerce system," and the various types of 
sen^ices that can be provided by this system are gener- 
ally called "nrx)t)ite electronic commerce servk;es." 
[0337] As is shown in the system anrangement dia- 
gram in Rg. 1 . the mobile electronic commerce service. 3o 
which provides two types of bi-directional wireless com- 
munication functions, comprises: a mobile user temmnal 

100, which can function as an electronic ticket, an elec- 
tronic payment card, an electronic telephone card and 

an electronic credit card (bank card); a gate terminal 35 

101 . which can perform an automatic examination proc- 
ess for a ticket; a merchant terminal 102. which can be 
used for a payment settlement process or a credit settie- 
ment process performed at a cash register counter in a 
retail shop: a merchant terminal 103. which can be used 40 
for a payment settiement process or a credit settiement 
process perfomied in a mobile environment; an auto- 
matic vending machine 104. which has a payment set- 
tlement function; a switching center 105 for a digital 
wireless telephone, which has a payment settlement 4s 
function tfiat is used for wireless telephone communica- 
tions; a transaction processing system 106. which can 

be used to perform a credit settiement process at a 
credit service company or a settlement conpany; a 
ticket issuing system 107, which is used for issuing a 50 
ticket at an event company or a ticket Issuance com- 
pany; a payment card issuing system 108. which is 
used for issuing a payment card at a retail sales com- 
pany or at a payment card issuance company; a tele- 
phone card issuing system 109. which is used for ss 
issuing a telephone card for wireless telephone commu- 
nication at a wireless telephone communication com- 
pany or a telephone card issuance company: a service 


system 1 10. which constitutes the center of a communi- 
cation netwak that connects together the motule user 
terminal 100. the gate terminal 101 . the mercharrt termi- 
nals 102 and 103, the automatic vending nrachine 14, 
the switching center 105, the transaction processing 
system 106. the ticket issuing system 107, the payment 
card issuing system 108 and the telephone card issuing 
system 109, and which provides a mobile electronic 
commerce service: a digital public tine network 111, 
which provides a data transmission path for tiie net- 
work; a wireless telephone base station 112, which con- 
nects the mobile user terminal 100 to the switching 
center 105; a wireless telephone base station 113, 
which connects the merchant terminal 103 to the digital 
public line network 1 1 1 ; a wireless telephone base sta- 
tion 114, which connects the automatic verxitng 
macNne 104 to the digital public line network 111; and 
a destination telephone terminal 115. which is con- 
nected to the digital public line network 111 when in 
use. 

[0338] The mobile user terminal 100 is a portable, 
wireless telephone terminal that has two types of bi- 
directioneU wireless communication functions, infrared 
communication and digital wireless telephone commu- 
nk:ation; an electronic ticket function; an electronic pay- 
ment card function; an electronic telephone card 
function: and an electronic credit card function. 
[0339] The merchant tenninal 103 and the automatic 
vending machine 104 also have two types of bi-direc- 
tional wireless communication functions. And the gate 
terminal 101 and the merchant terminal 102 also have 
the two types of bi-directional conrrmunfoation functions, 
infrared communication and digital wireless telephone 
comnujnication. 

[0340] The t>ase station 1 12 has a function, for which 
a control channel extending to the mobile user terminal 
100 is employed, involving the transmission of settie- 
ment information that is exchanged by tiie mot>ile user 
terminal 100 and the switching center 105. 
[0341] The telephone terminal 1 15 is an arbitrary tel- 
ephone terminal to which a connection can be made 
across the digital public line network 111. and can be 
either a fixed telephone terminal or a mobile wireless 
telephone terminal. 

[0342] In Rg. 1. reference numeral 116 denotes a 
transmission path for digital wireless telephone commu- 
nication between the mobile user terminal 100 and tiie 
base station 112; 117, a digital communication line for 
connecting the base station 1 12 to the switching cemer 
105; 118. a digital communication line for connecting 
tiie switching center 105 and the digital put>lic line net- 
work 1 1 1 ; 1 19. a transmission patii for infrared commu- 
nication conducted between the mobile user terminal 
100 arxJ the gate terminal 101 ; 120. a digital telephone 
communication line for connecting the gate terminal 101 
and the digital public line network 1 1 1 ; 121 . a transmis- 
sion path for infrared communication concocted 
between the vndbWe user terminal 100 and the merchant 
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terminal 102; ^2Z, a digital telephone oomnujnication 
line for connecting the mercharrt 102 and the digital 
put>lic line network 111; 123. a transnvssion path for 
infrared communication conducted between the mer- 
chant terminal 1 03 and the base station 1 13; 1 25, a dig- . 5 
ital comminication line for connecting the base station 
1 13 to the digital public line network 1 1 1 ; 126, a trans- 
mission path for infrared communication conducted 
between the mobile user terminal 100 and the auto- 
matic vending machine 104; 127, a transmission path w 
for digital wireless communication conducted between 
the automatic vending nnchine 104 and the base sta- 
tion 1 14; 128, a digital oommuiication line for connect- 
ing the base station 1 1 4 to the digital public line network 
111; 129, a telephone communication line for connect- 75 
ing the telephone tenrtlnal 1 15 to the digital public line 
network 1 1 1 ; 130, a digital communication line fa con- 
necting the digital public line network 1 1 1 to the service 
system 110; 131, a digital communication line for con- 
necting the service system 110 and the transaction 20 
processing system 106; 132, a digital communication 
line for connecting the service system 1 10 and the ticket 
issuing system 107; 133, a digital communication line 
for connecting the service system 110 and the payment 
card issuing system 108; and 134, a digital communica- 2s 
tion line for connecting the service system 110 and the 
telephone card issuing system 109. Through multiplex- 
ing, the digital communication lines 130 to 134 espe- 
cially can serve as multiple communication lines. 
[0343] The following system Is employed as the nor- 30 
mal operating system for the mobile electronic conv 
merce service. 

[0344] The transaction processing system 106 is 
installed at a credit card company, a t>ank, or a settle- 
ment processing company. The ticket issuing system 35 
107 is installed at an event company or a ticket issuance 
company. The payment card issuing system 108 is 
installed at a retail sale company or a payment card 
issuance company. The telephone card issuing system 
109 is installed at a wireless telephone comnruinication 40 
company or a telephone card issuance company. 
[0345] The gate terminal 101 is installed at the 
entrance to a movie theater or to an event hall, and the 
merchant terminal 102 is installed at a cash register 
counter in a retail shop. The merchant terminal 103 is 4S 
carried by a sales derk or a person in charge of collect- 
ing money, and the mobile user terminal 100 is can-ied 
by a consumer. The service system 1 10 is installed at a 
company that provides the mobile electronic commerce 
service. so 
[0346] Further, the following relationship is assumed 
as constituting a social relationship among the individ- 
ual devices that form the mobile electronic commerce 
system and among the owners of the individual sys- 
tems. 55 
[0347] A consumer who owns a mobile user terminal 
100 enters into a credit sen^k^ ment)ership contract 
with a credit card company or a bank, a mobile elec- 


tronic commerce service membership contract with a 
company that provides the mobile electronic commerce 
service, and a wireless telephone communication serv- 
ice contract with a wireless telephone communication 
company 

[0348] The owner of the gate terminal 1 0 1 . for exam- 
ple, a manager of a movie theater or an event hall, has 
entered into a contract with the owner of the ticket issu- 
ing system 107 for handling tickets issued by the ticket 
issuing system, a mobile electronic commerce service 
member store contract with a company that provkles 
the mobile electronic commerce service, and a digital 
telephone communication service contract with a tele- 
phone convmink^ation company. The owner of the gate 
terminal 101 may t>e the same individual who owns the 
ticket issuing system 107. 

[0349] The retail shop that owns the merchant termi- 
nal 102 has entered into a contract with the owner of the 
payment card issuing system 1 08 for the handling of the 
payment cards issued by the payment card issuing sys- 
tem, a credit card member store contract with a credit 
card company or a bank, a mobile electronic commerce 
sendee member store contract with a company that pro- 
vides the mobile electronic commerce service, and a 
digital telephone oommunrcation service contract with a 
telephone communication company. The owner of the 
merchant terminal 102 may be the same individual who 
owns the payment card issuing system 108. 
[0350] The owner of the merchant terminal 103 has 
entered into a contract with the owner of the payment 
card issuing system 108 for the handling of the payment 
cards issued by the payment card issuing system, a 
aedit card member store contract with a credit card 
company or a bank, a mobile electronic commerce 
service member store contract with a company that pro- 
vides the mobile electronic commerce service, and a 
digital telephone communication service contract with a 
telephone communication company. The owner of the 
merchant terminal 103 may be the same individual who 
Gwns the payment card issuing system 108. 
[0351] The owner of the automatic vending machine 
104 has entered into a contract with the owner of the 
payment card issuing system 1 08 for the handling of the 
payment cards Issued by the payment card issuing sys- 
tem, a mobile electronic commerce service member 
store contract with a company that provides the mobile 
electronic commerce service, and a digital telephone 
communication service contract with a telephone com- 
munication company. The owner of the automatic vend- 
ing machine 104 may be the same individual who owns 
the payment card issuing system 108. 
[0352] The wireless telephone communkation com- 
pany, which is tiie owner of the switching center 105, 
has entered in a contract with the owner of the tele- 
phone card issuir^ system 109 for the handling of the 
telephone cards issued by the telephone card issuing 
system, and a mobile electronic commerce service 
member store contract with a company that provkles 
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the mobile etectronic commerce service. The wireless 
telephone communication company may be the owner 
of the telephone card issuing system 109. 
[0353] The owner of the ticket issuing system 107 

enters -into a credit service member store contract with s 

a credit card company or a bank, a mobile electronic 
commerce service ticket issuer contract with a conpany 
that provides the mobile electronic commerce service, 
and a digital communication service contract with a 
communicatton service company. The company that io 
provides the mobile electronic convnerce servk:e may 
own the tk:ket issuing system 107. 
[0354] The owner of the payment card issuing system 
108 enters into a credit service member store contract 
with a credt card company or a bank, a fnck»\e elec- is 
tronic commerce service ticket issuer contract with a 
company that provides the mobile electronic commerce 
service, and a digital oommunk;ation servrce contract 
with a corrrmunicatkxi service conpany. Hie company 
that provides the mobile electronic commerce servk^e 20 
may own the payment card issuing system 106. 
[0355] The owner of the telephone card issuing sys- 
tem 109 has entered into a credit service member store 
contract with a credit card company or a bank, a mot)ile 
electronic commerce service ticket issuer contract with 2s 
a company that provides the motale electronic com- 
merce sen^ice, and a dtgrtal communication service 
contract with a conrvnunicatton service company. The 
company that provides the mobile electronic commerce 
service may own the telephone card issuing system 30 
109. 

[0356] The company that provkJes the mobile etec- 
tronic commerce service has entered into a contract 
with one or more credit card companies, or banks acting 
for the credit card oonpanies, or a bank to issue elec- 35 
tronic credit cards (bank cards) and to provide a credit 
card service for a member store who has entered into a 
contract for the credit service. The mobile electronic 
commerce service company also has entered into a 
contract with the owner of the ticket issuing system 107 40 
to act for the ticket issuing system and to issue elec- 
tronic tickets and to provide a ticket card service: has 
entered into a contract with the owner of the payment 
card issuing system 108 to act for the payment card 
issuing system and to issue electronic payment cards 4s 
and to provide a payment settlement service: and has 
entered into a contract with the owner of the telephone 
card issuing system 109 to act for the telephone card 
issuing system and to issue electronic telephone cards 
and to provide a wireless telephone payment settlement so 
sen^ice. 

[0357] To perform aedrt settlements using the trans- 
action processing system 106. the settlement process- 
ing company has entered into a contract with one or 
more aedrt card corrpanies or banks to act for them 55 
and to perform the credit settlements. 
[0358] When the transaction processing system used 
to perform credit settlements differs from that for credit 


cards, a plurality of transaction processing systems hav- 
ing the same form as the transaction processing system 
106 in Fig. 1 are connected to the service system 110 
via digital communication lines. 
[0359] Similarly, when the ticket issuing system differs, 
depending on the ticket type, a plurality of ticket issuing 
systems having the same form as the tfoket issuing sys- 
tem 107 in Fig. 1 are connected to the service system 
1 10 via digital communication lines. Also, when the pay- 
ment card Issuing system differs, depending on the pay- 
ment card type, a plurality of payment card issuing 
systems having the same form as the payment card 
issuing system 108 in Fig. 1 are connected to the serv- 
ice system via digital communication lines. And when 
the telephone card issuing system differs, depending on 
the telephone card type, a plurality of telephone card 
issuing systems having the same form as the telephone 
card issuing system 109 in Fig, 1 are connected to the 
servk;e system 110 via digital communicatfon lines. 
[0360] In order to simpirfy the fdkswing explanation of 
the system of the present invention, a consumer who 
owns a mobile user terminal 100 is called a user: a per- 
son who owns a merchant terminal 103 or an automata 
vending machine 104 for the provision and sale of prod- 
ucts and services is called a merchant; a wireless tele- 
phone communicatfon company that owns a switching 
center 105 and provkies a wireless telephone communi- 
catfon servkie is called a communication servfoe pro- 
vkler; a company that owns a service system 110 and 
provides a nx)bile electronic commerce service is called 
a service provkjer; a credit card company or a settle- 
ment processing company that owns a transaction 
processing system 106 and performs a credit settle- 
ment process is called a transaction processor; a per- 
son who owns a ticket issuing system 107 and sells 
tickets is called a ticket issuer; a person who owns a 
payment card issuing system 108 and sells payment 
cards is called a payment card issuer; and a person who 
owns a telephone card issuing system 1 09 and sells tel- 
ephone cards is called a telephone card issuer. 
[0361] The mobile electronic commerce services that 
are provkjed by the system of this invention are gener- 
ally broken down into four main types: an electronic 
ticket service, an electronic payment card service, an 
electronic telephone card service and an electronic 
credit card service. 

[0362] The electronic tcket service is a complete elec- 
tronic service for the vending of a ticket via a network, 
the delivery of a ticket that is accomplished subsequent 
to its purchase, and the use of the ticket. 
[0363] Specrffoally, a user employs the mobile user 
terminal 100 to purchase a ticket from the ticket issuing 
system 107. The user receives, from the service sys- 
tem, an electronic ticket consisting of electronic informa- 
tion, and stores and manages the ticket in the mobile 
user temriinal. Then, to use the electronic ticket stored in 
the mobile user terminal the user presents the mobile 
user terminal to the gate terminal 101. whereat the elec- 
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trontc ticket information is extracted and examined. 
[0364] The electronic payment card service is a com- 
plete electronic service for the vending of a payment 
card via a network, the delivery of a payment card that 
is accomplished siteequent to its pur<:hase. and a s 
charge settlement process performed with the payment 
card. 

[0365] Specifically, a user, through the service system 
1 10. employs the mobile user terminal 100 to purchase 
a payment card from the payment card issuing system io 
108. Thereafter, the user receives, from the service sys- 
tem, an electronic payment card consisting of electronic 
information, and stores and manages it in the nx^bile 
user terminal. To use the electronic payment card, while 
in communication with the mercharrt terminal 102 (or 75 
the merchant terminal 103 or the automatic vending 
machine 104) the user presents the mobile user termi- 
nal, in which the electronic payment card is stored, to 
the merchant temiinal 102. and charge settlement infor- 
mation provided by the electronic paymerrt card is 20 
extracted in order to perform a charge settlement proc- 
ess. 

[0366] The electronic telephone card servrce is a com- 
plete electronic service for the vending of a telephone 
card via a networK the delivery of a telephone card that 2s 
is accomplished subsequent to its purchase, and the 
use of the telephone card to settle a charge incurred 
through wireless telephone communicatfon. 
[0367] Specifically, a user, through the service system 
1 10. employs the mobile user terminal 100 to purchase 30 
a telephone card from the telephone card issuing sys- 
tem 109. Thereafter, the user receives, from the service 
system, an electronic telephone card consisting of elec- 
tronic information, and stores and manages rt in the 
vndbWe user ternrinal. To use the electronic telephone 3S 
card, while in communication with the switching center 
105 the user presents the mobile user terminal, in which 
the electronic telephone card is stored, and infomrntion 
is extracted to settle a charge for wireless telephone 
communication incurred white the electronic telephone 40 
card Is in use. 

[0368] The electronic credit card service is a complete 
electronic service for which a credit card is used to set- 
tle the cost of a ticket, a payment card, or a telephone 
card that is purchased via a network, and to settle 4s 
charges incurred at a normal retail shop. 
[0369] Specifically, an electronic credit card, which 
consists of electronic information, is stored in advance 
and managed in the mobile user terminal 100 and the 
service system 110. When a user purchases a ticket, a so 
paymerrt card or a telephone card using the service sys- 
tem, through the exchange of data with the transaction 
processing system 106 the service system presents the 
card nurrijer of the aedit card that is designated by the 
user, and provkies aedit settlement information to be ss 
used to perform a credit settlement process for the pur- 
chase cost. To perform a credit settlement process with 
the merchant tenminal 102 (or the merchant terminal 


103) at a retail shop, settlement information is 
exchanged by the nx)bile user terminal and the mer- 
chant terminal 102 (or tiie merchant terminal 103), by 
the merchant terminal 102 (or the merchant terminal 
103) and the service system 110, and by the service 
system 110 and the nxjbile user terminal 100. Also, 
through data communication with the transaction 
prtx;essing system 106, the service system 110 
presents the card number of the credit card designated 
by the user and provkjes tiie credit settlement informa- 
tion required to settle an accessed charge. 
[0370] A detailed explanation wil I be given later for the 
electronic ticket service, the electronic payment card 
service, the electronc telephone card service and the 
electronic credit card service. 

[0371] For these four services, transmission paths or 
oomrrunication lines are constantiy enrployed for data 
oomnrunication by the indivkiual devices of the system. 
[0372] First, the nrabile user terminal 1 00 uses a dig- 
ital wireless telephone to communicate witii the switch- 
ing center 105 via tiie transmission path 1 16. the base 
station 112 and the digital communication line 117. and 
with tiie servkje system 1 10 via the digital communica- 
tion line 1 18. tiie digital public line network 1 1 1 and the 
digital communication line 130; and uses infrared com- 
municatfon to communicate with the gate terminal 101 
via tiie transmission path 119. witii the merchant termi- 
nal 102 via the tiansmission path 121. with the mer- 
chant terminal 103 via the transmission path 123. and 
wrtii the automatk; vending machine 104 via the trans- 
missfonpath 126. 

[0373] The gate terminal 101 empfoys digital tele- 
phone communication to communicate witii the service 
system 1 10 via the digital telephone communication line 
120. the digital piMc line network 111 and the digital 
communication line 130. 

[0374] The merchant terminal 102 employs digital tel- 
ephone communication to communicate with the serv- 
ice system 1 10 via the digital telephone communicatfon 
line 122. the digital public line network 111 and the dig- 
ital communication line 130. 

[0375] The merchant terminal 1 03 employs digital tel- 
ephone communication to communicate with the serv- 
ice system 1 10 via the transmission path 124, the t>ase 
station 113. the digital communication line 125. the dig- 
ital put)ltc line network 1 1 1 and the digital communica- 
tion line 130. 

[0376] The automatic vending machine 104 employs 
digital telephone communication to communicate witii 
the service system 110 via the ti^ansmission path 127. 
the base station 114. the digital communication line 
128, the digital public line network 111 and the digital 
oommunfoation line 130. 

[0377] Digital data are exchanged by the service sys- 
tem 110 and the transaction processing system 106 via 
the digital communication tine 131, by the service sys- 
tem 1 1 0 and the ticket issuing system 1 07 via tfie digital 
oommunfoation line 132, by the sen^ice system 1 10 and 
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the payment card issuing system 108 via the digrtal 
communication line 1 33, and by the service system 1 1 0 
and the telephone card issuing system 109 via the dig- 
ital communication tine 134. 
[0378] All the intonnation to be exchanged is first 
encrypted and is then exchanged through communica- 
tion conducted, between the nx)bile user terminal 100 
arKl the service system 1 10. between the gate terminal 
101 and the service system 110, between the merchant 
terminal 102 and the service system 110, between the io 
merchant terminal 103 and the sen/ice system 110, 
between the automatic verxling machine 104 and the 
service system 110, between the switching center 105 
and the service system 110. between the service sys- 
tem 110 and the transaction processing system 106, 75 
between the service system 110 and the ticket issuing 
system 107. between the service system 110 and the 
payment card issuing system 108, and between the 
senrice system 1 10 and the telephone card issuing sys- 
tem 109. A secret key and a public key are employed for so 
encrypting the irrformation, arKi the enaypted informa- 
tion Is electronically ck)sed and transmitted. 
[0379] In this system, an electronic ticket, an elec- 
tronic payment card, or an electrorric telephone card 
stored in the mobile user terminal 100 can be trans- 2S 
ferred to a different user who owns a mobile user termi- 
nal. With this function, multiple tk^kets can be purchased 
and transfen-ed to friends, etc., or an electronic payment 
card or an electronic telephone card can be prcvkled as 
a gift, so that the usage range can be expanded. 30 
[0380] In Fig. 2A is shown the system configuration 
where an electronk; ticket an electronic payment card 
or an electronk: telephone card is transferred between 
mobile user terminals 100 and 200. 
[0381] In Rg. 2, reference numeral 203 denotes a 35 
transmission path used for infrared communication 
between the mobile user terminals 100 and 200. The 
mobile user terminal 200 is connected to the digital pub- 
lic line network 111 via a base s1atk>n 201 for a digital 
wireless telephone, a digital oommunrcation line 205. a 4o 
swrtching center 202 for a digital wireless telephone, 
and a digital communication line 206. 
[0382] Basically, transfer information is exchanged by 
the mobile user terminals 100 and 200 when transfer- 
ring an electronic ticket an electronk; payment card or 4s 
an electrons telephone card. For the exchange of trans- 
fer information, infrared convnunk^ation or digital wire- 
less telephone communication is enpbyed by the 
mobile user terminals 100 and 200. Generally, when the 
user of the mobile user terminal 1 00 and the user of the so 
mobile user terminal 200 are very near each other 
(wrtNn a distance of approximately 1 meter), infrared 
communication is employed for a transfer process. But 
when the two users are distant from each other, digital 
wireless telephone communk:ation is employed for the 55 
transfer process. 

[0383] To perform the transfer process by empk>ying 
digital wireless telephone communicatk>n. the mobile 


user terminal 100 communicates with the motMie user 
temiinal 200 via the transmission path 116. the base 
station 112. the digital commurdcatbn line 117. the 
etching center 105, the digital communicatbn line 
. 1 18, the digital public line network 1 1 1. the digital com- 
munication line 206. the switching center 202, the digital 
communication line 205, the base station 201 and the 
transmission path 204. 

[0384] Actually, the base 8tatk)n 1 1 2 and the base sta- 
tion 201. or the swrtching center 105 and the swvitching 
center 202. may be identical to each other in accord- 
ance with the geographical positk)nal relationship exist- 
ing between the mobile user terminals 100 and 200. 
[0385] A detailed explanation will be given later for the 
transfer process employed for an electronic ticket, an 
electronk; payment card or an electronk; telephone 
card. 

[0386] In this system, an electronic payment card, an 
electronk; telephone card or an electronic ticket can t>e 
procured as a common retail purchase for installation in 
the nrK3bile user terminal 100. Specifically, an installation 
card 207 (see Fig. 2B) made of a comparatively low cost 
material, such as paper, plastic or vinyl chlorkJe. is 
employed as a distribution medium for the electronic 
paynient card, the electronic telephone card or the elec- 
tronic ticket. 

[0387] For an electronic payment card, for example, 
the payment card issuer issues an installation card 207 
on which is printed identification informatk>n (installation 
information) for a payment card to be Issued, and 
makes the installation card 207 available for sale at a 
retail sales outlet such as a convenience store or a 
kiosk at a station. When a user purchases an installa- 
tion card or receives one as a gift, he or she employs the 
mofcMie user terminal 100. through the service system 
110. to request tfiat the payment card issuing system 
108 install the electronic payment card. The user then 
receives the electronic payment card from the servk;e 
system and installs the electronic payment card in the 
mobile user terminal 100. 

[0388] Similarly, for an electronic telephone card, tiie 
telephone card issuer issues an installation card 207 on 
which identification information (installation information) 
for a telephone card to be issued is printed, and makes 
the installation card 207 available for sale at a retail 
sales outiet. When a user purchases an Installation card 
or receives one as a gift, he or she employs the mobile 
user terminal 100. through tiie service system 110. to 
request that the telephone card issuing system 109 
install the electronic telephone card. The user then 
receives the electronic telephone card from the service 
system and installs the electronic telephone card In the 
mobile user terminal 100. 

[0389] In the same manner, for an electronic ticket the 
ticket issuer issues an installation card 207 on whkii 
identification Information (installation information) for a 
ticket to be issued is printed, and makes the installation 
card 207 available for sale at a retail sales outlet such 
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as a convenience store or a theater ticket agency. When 
a user purchases the installation card or receives it as a 
gift, he or she employs the mobile user terminal 100. 
through the service system 110. to request that the 
ticket issuing system 1 07 install the electronic ticket, s 
The user then receives the electronic ticket from the 
service system and installs the electronic telephone 
card in the wdbWe user terminal 100. 
[0390] The merits of an installation card are that no 
communication fee is required to purchase an electronic io 
payment card, an electronic telephone card or an elec- 
tronic ticket, and that actually tiie installation card can 
be held in one's hand. In particular, the demand for the 
installation card for the electronic payment card or for 
the electronic telephone card can be increased as a gift is 
or a collection item, and tills results in the expansion of 
the range of the usage of the electronic payment card 
and the electronic telephone card. In addition, the instal- 
lation card for tiie electronic ticket adequately provides 
for the purchase non-seat-reserved tickets, such as 20 
those for movies and art exhibitions. 
[0391 ] A detailed explanation of the installation proc- 
ess will be given later using the installation card for the 
electronic payment card, the electronic telephone card 
or the electronic ticket. 2s 
[0392] The individual components of the system will 
nowbedescrit)ed. 

[0393] Rrst the mobile user terminal 100 will be 
desaibed. 

[0394] Figs. 3A and 3B are a front view and a rear 30 
view of tiie mobile user terminal 100. 
[0395] In Rg. 3A, refererK;e numeral 300 denotes an 
infrared communication port (infrared communication 
module) used when engaging in infrared communica- 
tion with the merchant terminal 101 : 301 . an antenna for 35 
receiving and transmitting radio signals for a digital wire- 
less telephone; 302. a receiver loudspeaker; 303, a 120 
X 160 pixel color liquid crystal display (LCD); 304, a 
mode switch for changing the operating mode of the 
nxibile user temninal 100; 305, a speech switch for the 4C 
digital wireless telephone; 306, an end switch fa the 
digital wireless telephone; 307, a function switch; 308. 
number key switches; 309. a power switch; and 310, a 
microphone. 

[0396] In Fig. 3B, reference numeral 31 1 denotes an 4S 
execution switch used to permit processing when confir- 
mation by a user is required, such as confirmation of tiie 
payment of a quoted price and confirmation of tiie terms 
agreed to for a settiement; and 312. a headphone jack 
used tor connecting a hea4>hone set so 
[0397] The mobile user terminal 1 00 has six operating 
modes: a digital wireless telephone mode, a telephone 
card mode, a payment card mode, a credit card mode, a 
tkicet mode, and a personal information management 
mode. The mode switch 304 is used to select ttiese ss 
modes. 

[0398] In Figs. 3A, 3C, 3D and 3E are shown the 
respective screens displayed on the LCD 303 in tiie 


aedit card mode, the ticket mode, the payment card 
mode and tiie telephone card mode. In Figs. 3F. 3G and 
3H are shown other example scre&is displayed on the 
LCD 303 in the ticket mode, the payment card mode 
and the telephone card mode. While in Figs. 3A, 3C, 3D 
and 3E only characters are displayed on the saeens, in 
Figs. 3F, 3Q and 3H image information, such as tiie 
images 313, 314 and 315, is also displayed. In tiie elec- 
ti'onic ticket mode, as in the other modes, tiie image 
information is included in the representative component 
infomiation for an electronic ticket program, which will 
be descrbed later while referring to Figs. 19. 20 and 21 . 
[0399] in the digital wireless telephone mode, the 
mobile user terminal 100 serves as a digital wireless tel- 
ephone based on tiie contract with the communication 
service provider that provides the digital wireless tele- 
phone service. In the telephone card mode, tiie mobile 
user terminal 100 serves as a digital wireless telephone 
that errploys the electronic telephone card for tiie pay- 
ment of a conmink»tion charge. Further, the mobile 
user terminal 100 serves as an electronic payment card 
in the payment card mode, serves as an electronic 
aedit card in the aedit card mode, and serves as an 
electronic ticket in tiie ticket mode. 
[0400] The personal information management mode 
is the operating mode used for managing the personal 
information for a user tiiat is stored in the nrKsbile user 
terminal 100. In tiie personal information management 
nxxie. the user refers to the personal information and 
portrait data that are stored, and sets the user setup 
information. 

[0401] Multiple payment cards, telephone cards and 
electronic tickets can be registered in the mobile user 
terminal 100 using the purchase and transfer process 
available on the network, or during the installation proc- 
ess using the installation card. 
[0402] The electronic credit card is registered in tiie 
mobile user terminal 100 on the assumption that a sub- 
ject user is a party to a membership contract for credit 
servicing entered into with a aedit card company. When 
a subject user is a party to multiple credit service mem- 
bership contracts, multiple credit cards are registered in 
tiie mobile user terminal 100. 
[0403] When, for example, a user places a call using 
the mobile user terminal 100, first, he or she manipu- 
lates tiie mode switch 304 and sets tiie operating mode 
to tiie digital wireless telephone mode. Then, the user 
enters a phone number using the number key switches 
308 and depresses the speech switch 305. By employ- 
ing ttie above operation, the user can place a call to a 
destinatfon corresponding to the telephone number that 
was entered. 

[0404] To receive a call at the mobile user terminal 
100. the mobile user terminal 100 generates a call 
reception tone, regardless of the current operating 
mode. Then, the operating mode can be automatically 
changed to the digital wireless telephone nrxxle simply 
by tiie depression of tiie speech switch 305 and the user 
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can answer the call. 

[0405] To place a call using the electronic telephone 
card, first a user sets the operating mode to the tele- 
phone card nxxje by nianipulating the mode switch 304. 
and employs the function switch 307 (F1 or F2) to select s 
an electronic telephone card to be used to make the 
payment for the commurHcation charge (to display on 
the LCD the electronic telephone card to be used for the 
paynoent: see Fig. 3E). Then, the user enters the tele- 
phone number using the number key switches 308 and io 
depresses the speech switch 305. By employing this 
operation, the user can place a call to the destination 
that corresponds to the telephone number that was 
entered, while the communication charge is subtracted 
from the credit total held by the electronic telephone 75 
card. 

[0406] To pay a quoted price using the electronic pay- 
ment card, first, the user manipulates the mode switch 
304 to set the operating mode to the payment card 
mode, and employs the function switch 307 (F1 or F2) to 20 
select a payment card to be used for the payment (to 
display on the LCD the electronic payment card to be 
used for the payment; see Rg. 3D). Then, the user 
enters the payment value using number key switches 
308 and depresses the execution switch 311, while 25 
directing the infrared conrtnunication port 300 toward 
the merchant terminal 102 of the merchant (or the mer- 
chant terminal 103 or the automatic vending machine 
104). Through this operation, the mobile user tenminal 
100 is enabled to engage in infrared communication 30 
with the merchant terminal 102 (or the merchant termi- 
nal 103 or the automatic vending machine 104), and 
can exchange settlement information for setting the 
terms for the payment to be made using the electronic 
payment card. 35 
[0407] To pay a quoted price to a merchant using 
credit first a user manipulates the mode switch 304 to 
set the operating mode to the credit card mode, and 
then employs the function switch 307 (F1 or F2) to 
select a aedit card to be used for payment (to display 40 
on the LCD the electronic credit card to be used for the 
payment: see Fig. 3A). Then, the user enters the 
amount of the payment using the number key switches 
308 and depresses the execution switch 311, while 
directing the infrared comnnunication port 300 toward 4S 
the merchant terminal 102 of the merchant (or the mer- 
chant terminal 103). Through this operation, the mobile 
user temvnal 100 is enabled to engage in infrared com- 
munication with the merchant terminal 102 (or the mer- 
chant terminal 103). The mobile user terminal also so 
participates in digital wireless telephone communication 
with the service system 100 and transmits the settle* 
ment information for credit clearance. 
[0408] To present an electronic ticket for electronic 
ticket exanrvnation, first, a user manipulates the mode ss 
switch 304 to set the operating nrxxje to the ticket mode, 
and employs the function switch 307 (F1 or F2) to select 
a trck^ to be presented (to display on the LCD the elec- 


tronic ticket to be used: see Fig. 3C). Then, the user 
depresses the execution switch 311. while directing the 
infrared communication port 300 towsird the gate termi- 
nal 101 that is installed at the entrance to a movie 
theater or an event hall. Through this operation, the 
mobile user terminal 100 is enabled to engage in infra- 
red communication with the gate terminal 101. and to 
provide information for the examination of the electronic 
ticket. 

[0409] A detailed explanatfon will be given later to 
describe the internal structure and the operation of the 
motMie user terminal 100. 

[0410] The gate terminal 101 will now be explained. 
[0411] Fig. 4 is a diagram showing the external 
appearance of the gate terminal 101. In Fig. 4, refer- 
ence numeral 400 denotes an infrared communication 
module for infrared communication with a motsile user 
temninal 100: 401. a 6440 x 480 pixel touch panel liquid 
crystal display (touch panel LCD): 402. a power switch: 
403. number key switches: 404, a menu switeh for 
changing the display on the touch panel LCD 401 to the 
menu screen; 405. a lock switoh for locking the .disg^ 
on the touch panel LCD 401 and the opeg}|p^rthe 
gate terminal: and 406, a serial cable used to oortnect 
the infrared module 400 to the gate temninal. In addition, 
at the rear of the gate terminal an RS-232C interface is 
provided tor the connection of an external device, such 
as a gate opening/closing device. 
[0412] The gate terminal 101 has two primary operat- 
ing modes: a ticket examination mode for examining an 
electronic ticket and a ticket setup mode for setting up 
an electrons ticket to be examined. To change the oper* 
ating mode of the gate terminal 101, the menu switch 
404 is depressed, which changes the display on the 
tough panel LCD 401 to the menu screen, and a nrxxie 
is selected by touching the screen. 
[0413] In the ticket examination mcdB, the gate termi- 
nal 101 waits until, using infrared communication, an 
electronic ticket is presented. When a user employs the 
mobile user terminal 1 00 to present an electronic ticket, 
the gate terminal 101 examines that electronic ticket, 
exchanges examination information with the mobile 
user terminal, and displays the results on the screen. 
The operator (merchant) of the gate terminal permits or 
bars the entry of the user in accordance with the results 
displayed on the screen. When a gate opening/closing 
d^ice is connected as an external device, the gate is 
opened or cfosed in accordance with the results of the 
examination. 

[0414] The lock switch 405 is used when the operator 
(merchant) leaves the gate ternninal 101. The operator 
locks the saeen display and the operation of the gate 
terminal to prevent the illegal operation of the gate ter- 
minal. Once the gate terminal has been locked using 
the lock switch, it can not be unlocked until a password 
that was set previously is entered. 
[0415] In the ticket setup mode, when code informa- 
tion for designating an electronic ticket is entered using 
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the number key switches 403. a program module (ticket 
examination module) for examining the designated 
electronic ticket is downloaded from the service system 
100, and the eiectronic ticket to be examined is set up. 
[0416] A detailed explanation of. the internal structure s 
and the operation of the gate temilnat 101 will be given 
later. 

[0417] The merchant terminal 102 will now be 
described. 

[0418] Fig. 5 is a diagram showing the external io 
appearance of the merchant terminal 102 when, for cal- 
culating the price of a product it is connected by an RS- 
232C cable 514 to a cash register 51 1 . 
[0419] In Fig. 5. reference numeral 501 denotes an 
infrared communication module for engaging in infrared is 
communication with the nxd^ile user tern^nal 100; 502, 
a 320 X 240 pixel color liquid crystal display (LCD); 503, 
a telephone handset; 504, a mode switch used for 
changing the operating nrxxle of the merchant terminal 
102; 506. a function switch; 507, number key switches; 20 

508. an execution ^tch for permitting the execution of 
processing for which confirmation by the merchant is 
required, such as confirmation of the terms of a settle- 
ment and confirmation of the reference results obtained; 

509, a power switch; 512. a payment card settlemertt 25 
switch for the cash register 51 1 for designating a settle- 
ment process using a paymerrt card; and 513, a credit 
settlement switch for designating a the settlement proc- 
ess using aedit. 

[0420] The merchant terminal includes three operat- 30 
ing HfKXies: a digital telephone mode, a merchant nxxle 
and a merchant information management nnode. These 
modes are changed by manipulating the mode switch 
504. The merchant terminal 102 serves as a digital tel- 
ephone in the digrtal telephone mode, and as a settle- 35 
ment temninat for an electronic payment card and 
electronic credit card in the merchant mode. The mer- 
chant information management mode is the operating 
nxxle for managing merchant information that is stored 
in the merchant terminal 102. In the merchant Infomria- 40 
tfon management nxxie. the merchant refers to the 
stored merchant information and sets merchant setup 
information. 

[0421 ] To make a call from the merchant terminal 1 02. 
first, the operator (merchant) of the merchant terminal 4S 
nwipulates the mode switch 304 and sets the operat- 
ing mode to the digital telephone mode, and then enters 
a phone number using the number key switches 507. 
Through the above operation, the operator (merchant) 
can place a call to a destination conresporKling to the so 
telephone number that was entered. 
[0422] To receive a call at the merchant terminal 1 02, 
the merchant terminal 102 generates a call reception 
tone, regardless of the current operating mode. Then, 
simply by raising the telephone handset 503 or depress- ss 
ing the hook switch 505 the operating mode is automat- 
ically changed to the telephone modie and the operator 
(merchant) can answer the call. 


[0423] To perform the settlement process, first, the 
operator (merchant) of the merchant terminal calculates 
the total charge by adding the price of a product and the 
tax and transmits it to the user. When the user desires 
to employ the electronic payment card to make the pay- 
ment, the operator depresses the payment card settle- 
ment switch 512 on the cash register 511. When the 
user desires to employ the electronic aedit card to 
make the payment the operator depresses the credit 
card settlement switoh 513 and warts for the user to per- 
form the payment operation at the mobile user terminal 
100. 

[0424] For the electronic payment card, when the user 
has performed the payment operatfon, a message indi- 
cating completion of the settlement preparation is dis- 
played on the LCD 502. At this time, the merchant 
terminal 102 uses infrared comnrujnication to exchange 
settlement information with the mobile user terminal 
100, and performs the settlement process using the 
electronic payment card. 

[0425] For the electronic credit card, when the user 
performs the paymerrt operation, a payment amount 
entered by the user is displayed on the LCD 502, and 
then the credit authorization results obtained for the 
user are displayed. The operator (merchant) confirms 
the contents and depresses the executfon switoh 508. 
Then, a message incficating completion of the settle- 
ment setup is displayed on the LCD 502. At this time, 
the merchant terminal 102 exchanges settlement infor- 
mation with the mobile user temninal 100 and the serv- 
ice system 110. and performs the settlen^ent process 
using the electronic credit card. 
[0426] A detailed explanation of the internal structure 
and the operation of the merchant terminal 102 will be 
given later. 

[0427] The merchant terminal 103 will now be 
descrbed. 

[0428] Figs. 6A and SB are a front view and a rear 
view of the merchant terminal 103. 
[0429] In Fig. 6A, reference numeral 600 denotes an 
infrared communication port (infrared conrwnunication 
module) used when engaging in infrared communica- 
tion with the mobile user terminal 100; 601 , an antenna 
for receiving and transmitting radio signals for a digital 
wireless telephone; 602, a receiver loudspeaker; 603. a 
180 x 240 pixel color liquid crystal display (LCD); 604. a 
mode switch for changing the operating mode of the 
merchant terminal 103; 605, a speech switch for the dig- 
ital wireless telephone; 606, an end switch for the digital 
wireless telephone; 607. function switches; 608, 
number key switohes; 609, a microphone; and 610, a 
bar code reader. 

[0430] In Fig. SB. reference numeral 61 1 denotes a 
power switch; 612, an execution switch for pernnitting 
the execution of processing that requires the confirma- 
tion of the merchant such as confirmation of the terms 
of a settlement and confirmation of the results of a credit 
authorization process; 613, a headphone jack used to 
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connect a headphone set: and 614, a card slot into 
which is inserted a memory card on which product infor- 
mation is recorded. 

[0431 ] The merchant ternninal 1 03 has three operating 
modes: a digital wireless telephone mode, a merchant s 
mode, and a merchant information management mode. 
These modes are changed b/ manipulating the mode 
switch 604. The merchant terminal 103 serves as a dig- 
ital wireless telephone in the digital wireless telephone 
mode, and as a settlement tennnal for an electronic io 
payment card and as an electronic credit card in the 
merchant nrxxfe. The merchant information manage- 
ment mode is the operating mode used for managing 
merchant information that Is stored in the merchant ter- 
minal 103. In the merchant information management is 
mode, the merchant refers to the stored merchant infor- 
mation and sets merchant seti^) information. 
[0432] To make a call from the merchant tenminal 103, 
first, the operator (merchant) of the merchant terminal 
manipulates the mode switch 604 to set the operating so 
mode to the digital telephone mode and enters a phone 
number using the number Key switches 608. Through 
the above operation, the operator (merchant) can place 
a call to a destination corresponding to the telephone 
number that was entered. 2s 
[0433] To receive a call at the merchant terminal 103, 
regardless of the cunent operating mode, the merchant 
tennina) 102 generates a call reception tone. Then, the 
operating mode is automatically changed to the tele- 
phone nx)de sinpty by the depression of the speech 30 
switch 605 and the operator (merchant) can answer the 
call. 

[0434] To perform the settlement process, first, the 
operator (merchant) of the merchant terminal manipu- 
lates the nKxJe switch 604 to set the operating mode to 35 
the merchant mode. The operator reads the bar code for 
a product using the bar code reader 61 0. and depresses 
the total switch in the number key switches 608 to calcu- 
late the total charge. The operator depresses the total 
switch again to display the results upside down on the 40 
LCD 603. so that the total charge is transmitted and is 
also provided for the user. When the user desires to 
make payment using the electronic payment card, the 
operator depresses the F2 switch of the function 
switches 607. When the user desires to make payment 45 
using the electronic credit card, the operator depresses 
the F3 switch and warts for the user to perform the pay- 
ment operation at the mobile user terminal 100. 
[0435] For the electronic payment card, when the user 
has performed the payment operation, a message indi- so 
eating the completion of the settlement preparation is 
displayed on the LCD 603. At this time, the merchant 
terminal 103 exchanges settlement information with the 
mobile user terminal 100 tsy using infrared communica- 
tion, and performs the settlement process using the 55 
electronic payment card. 

[0436] For the electronic credit card, when the user 
has performed the payment operation, a payment 


amount entered by the user is displayed on the LCD 
603. and then the aedrt authorization results obtained 
for the user are displayed. The operator (merchant) con- 
firms the contents and depresses the execution switch 
612. Then, a message indicating the completion of the 
settiement setup is displayed on the LCD 603. At this 
time, the merchant terminal 103 exchanges settlement 
information witii the mobile user terminal 100 and the 
service system 1 10, and performs the settlement proc- 
ess using the electronic credit card. 
[0437] A detailed explanation of the internal structure 
and the operation of the mercharrt terminal 103 will be 
given later. 

[0438] The automatic vending machine 104 will now 
be descrit>ed. 

[0439] Rg. 7 is a diagram showing the external 
appearance of the automatic vending machine 104. In 
Fig. 7, reference numeral 700 denotes an infrared com- 
munication port (infrared communication module) used 
when engaging in infrared communication with tie 
mobile user terminal 100: 701, an antenna used for 
receiving and transmitting radio signals fa a digital wire- 
less telephone; 702. a 640 x 480 pixel color liquki crys- 
tal display touch panel (touch panel LCD); 703, a 
product discharge port; 704. product selection switches; 
705, a sou out display (LED); and 706, a sample. 
[0440] To purchase a product from tiie automatic 
vending machine 104. a user who owns a mot>ile user 
terminal touches "purchase" in the operating menu dis- 
played on the touch panel LCD 702, and then 
depresses a product selection switoh 704 to select a 
desired product. The automatic vending machine 
counts the numt}er of products selected, and each time 
a product selection switch 704 is depressed the product 
count is increased by one, the total charge is calculated, 
and the names, the volumes and the total charge for the 
selected products are displayed, along with a button 
used to signal the start of a payment operation. When 
tiie user touches the button signaling the start of a pay- 
ment operation, the automatic vending machine 104 
displays a message on the touch panel LCD requesting 
payment using tiie electronic payment card. Then, when 
tiie user pays the amount charged using the mobile 
user terminal, the product is discharged at tiie dis- 
charge port 703 and a message indicating tiiat the set- 
tiement preparatbn has been completed is displayed on 
tiie touch panel LCD. After a short pause, tiie operating 
menu is again displayed. At this time, tiie automatic 
vending machine 104 uses infrared communication to 
exchanged settlement information witii the mobile user 
terminal 100. and uses the electronic payment card to 
perform the settiement process. 
[0441 ) When the user touches "product information" in 
the operating menu tiiat is displayed on the touch panel 
LCD 702 and selects a product using a product selec- 
tion »vitch 704, the information concerning the selected 
product is displayed on the touch panel LCD. The infor- 
mation concerning the product is nultimedia informa- 
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tion. inciudtng text, images, video and sound, and 
sound is output through a loudspeaker that is incorpo- 
rated in the automatic vending machine 104. Therefore, 
a CF (Commerda) Film) for the product may be output 
as information concerning the product. Further, when 5 
the product is a video, a music CO (Corrpact Disk) or a 
packaged media product, such as a software game pro- 
gram, sample information concerning the product may 
be output on the touch panel LCD and through the loud- 
speaker. 10 
[04421 A detailed explanation of the internal structure 
and the operation of the automatic vending machine 

104 will be given later. 

[0443] The switching center 105 will now be 
explained. 15 
[0444] Rg. 8 is a t>lock diag^m illustrating the 
anrangement of the switching center 105. In Fig. 8, ref- 
erence numeral 800 denotes an electronic telephone 
card accounting device that uses the electronic tele- 
phone card to perform the accounting for tel^hone 20 
communication: 801 . a switch for performing the switch- 
ing for a digital wireless telephone network, and the 
switching for the digital wireless telephone network and 
the digital public line network 111; 802, a data proces- 
sor for encoding and decoding sound and data; 803. a 2s 
nKXlulata/demodulator for performing a multiplexing 
process and a modulation/denxxiulation process; and 
804, a base station controller for controlling the t>a8e 
station. The digital communication line 117 is used to 
connect the switching center 105 to the base station 30 
112. Actually, however, multiple base statins are con- 
nected to the switching center 105. and reference 
numerals 805 and 806 denote digital comnujnication 
lines that are used to connect to the switching center 

1 05 base stations other than the t>ase station 112. Ref- 35 
erence numeral 807 denotes a control signal and a data 
signal exchanged by the electronic telephone card 
accounting device 800 and the switch 601 . 

[0445] The electronic telephone card accounting 
device 800 is operated in response to the initiation of a 40 
oomnuinication using the electronic telephone card. 
When the line connection is established, and while the 
line is connected (during the communication process), 
the electronic telephone card accounting device 
employs accounting information received from the 4S 
mitch 801 to exchange settlement information with the 
nKSbile user terminal 100 and to use the electronic tele- 
phone card to perform the 8ettlenr>ent process. At this 
tinDe, the switch 801 switches the lines in accordance 
with the terms of the settlement process that is per- so 
formed by the electronic telephone card accounting 
device 800. 

[0446] A detailed explanation of the internal structure 
and the operation of the electronic telephone card 
accounting device 800 will be given later 55 
[04471 The senfice system 1 10 will now be described. 
[0448] Rg. 9 is a block diagram illustrating the 
anangement of the service system 1 10. For the mobile 


electronic commerce service, the service system 110 
processes various types of transaction information that 
is exchanged with the mobile user terminal 100. the 
gate terminal 101, the merchant terminal 102, the mer- 
chant terminal 103. the automatic vending machine 
104. the switching center 105 (the electronic telephone 
card accounting device 800), the transaction processing 
system 106. the ticket issuing system 107. the payment 
card issuing system 108, and the telephone card issu- 
ing system 109. The service system 100 comprises: a 
service server 900, for controlling data communication; 
a service director irrformation server 901. for managing 
attribute information that concerns the user, the mer- 
chant, the communication provider, the transaction 
processor, the ticket issuer, the payment card issuer 
and the telephone card issuer and for managing the his- 
tory information for the service provided by the service 
system 110; a user information server 902, for manag- 
ing the user attribute information and the data stored in 
the mobile user terminal 100; a merchant information 
server 903. for managing the attribute information for 
the merchant and the communication provider and for 
managing data that are stored in the gate terminal 101 , 
the merchant terminals 102 and 103. the automatic 
v^ing machine 104 and the electronic telephone card 
accounting device 800; a transaction processor infor- 
mation server 904, for managing the attribute informa- 
tion for the transaction processor and the history 
infonnation of the settlement process; a ticket issuer 
information server 905, for managing the attribute infor- 
mation of the ticket issuer, the history information of the 
ticket issuing process and a template program for the 
electronic ticket; a payment card issuer infornwtion 
server 906, for managing the attribute information for 
the payment card issuer, the history information for the 
payment card issuing process and a template program 
for the electronic payment card; a telephone card issuer 
information server 907, for managing the attribute infor- 
mation for the telephone card issuer, the history infor- 
mation for the telephone card issuing process and a 
template program for the electronic telephone card; and 
a management system 908. with which the service pro- 
vider manages the operation of the service system 110. 
The servers 900 to 907 and the management system 
908 are constituted by one or more computers. 
[0449] The service server 900, the service director 
information server 901, the user information server 902. 
the merchant information server 903, the transaction 
processor information server 904, the ticket issuer infor- 
mation server 905, the payment card issuer information 
sen/er 906. and the telephone card issuer information 
server 907 are respectively connected to an ATM-LAN 
switch 909 by ATM-LAN cables 914. 915. 916, 91 7. 918, 
919, 920 and 921. The service server 900 accesses, 
through the ATM-LAN switch 909. the service director 
information server 901 . the user information server 902. 
the merchant information sender 903, the transactfon 
processor information server 904. the ticket issuer infor- 
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mation server 905, the payment card issuer information 
server 906, and the telephone card issuer information 
server 907. 

[0450] The ATM-LAN switch 909 is connected to an 
ATM switch 91-1 by an ATM-LAN cable 912. The digrta) s 
communication line 130 for connecting the digital jpMlc 
line network 1 1 1, the digital communication line 131 for 
connecting the transaction processing system 106, the 
digital communication line 132 for connecting the ticket 
issuing system 107, the digital communicatk)n line 133 io 
fa connecting the payment card issuing system 108, 
and the digital communk^ation line 134 for connecting 
the telephone card issuing system 108 are extended to 
the ATM switch 911. The service server 900 communi- 
cates, via the ATM-LAN switch 909 and the ATM switch is 
911, with the mobile user terminal 100, the gate termi- 
nal 101, the merchant terminal 102, the merchant tern^* 
nal 103, the automatic vending machine 104, the 
etectronk; telephone card accounting device 800. the 
trartsaction processing system 106, the ticket issuing 20 
system, the payment card issuing system and the tele- 
phone card issuing system. 

10451] The management system 908 is connected to 
the ATM-LAN switch 910 by an ATM-LAN c^e 922, 
and also connected to the ATM switch 911 by an ATM- ss 
LAN cable 913. In order to manage the operation of the 
service system 110, the management system 908 
accesses the service server 900, the service cfirector 
informatfon server 901 , the user infbrmatbn server 902, 
the merchant information server 903, the transaction so 
processor information server 904, the tk:ket issuer infor- 
mation server 905, the payment card issuer Information 
server 906 and the telephone card issuer information 
sender 907 through the ATM-LAN switch 910. the ATM 
switch 91 1 and the ATM-LAN switch 909. 35 
[0452] The ATM switch 91 1 serves as a data commu- 
nkiation switch (router) for communication between the 
outskie and the inside of the sen/ice system 110. and 
for service system 110 intercommunk»tion. In additbn. 
the ATM switch 91 1 serves as a oonrmujnication adaptor 4o 
for handling multiple communication systems. For 
example, when communication is established between 
the service server 900 and the merchant terminal 102. 
the merchant terminal 102 and the ATM switch 911 
exchange ISDN data packets. The ATM switch 91 1 con- 4s 
verts the ISDN data packets to ATM packets, or vice 
versa, and exchanges the ATM packets with the service 
server 900. Similarly, when communication is estab- 
lished between the service server 900 and the mobile 
user terminal 100, between the service sen/er 900 and so 
the merchant terminal 103, between the servce sen/er 
900 and the automata vending machine 104, fc>etween 
the service server 900 and the electronic telephone 
card accounting device 800. t>etween the service server 
900 and the transaction processing system 106, ss 
between the service server 900 and the ticket issuing 
system 107. between the service sender 900 and the tel- 
ephone card issuing system 109, and between the sen^- 


k:e server 900 and the payment card issuing system 
108, the ATM switch 91 1 performs communication data 
conversions in accordance with the individual communi- 
cation systems. 

[0453] In order to reduce the communication charges 
incurred by the 6en^k:e system 1 10 when communicat- 
ing with the mobile user terminal 100. the gate terminal 
101. the merchant terminal 102 or 103. the automatic 
vending machine 104 or the electronic telephone card 
accounting device 800. generally the service system 
1 10 is installed in each area (service area) wherein the 
mobile electronic commerce service is provided. There- 
fore, a special digital communication line 923 is con- 
nected to the ATM switch 91 1 to establish a connection 
with a servk^e system in another area. In this case, the 
servk;e systems share the data and interact with each 
other for data processing. 

[0454] The transactfon processing system 106 will 
now be explained. 

(0455] Fig. 10 is a bfock diagram illustrating the 
arrangement of the transaction processing system 106. 
The transaction processing system 106 comprises: a 
transactfon process sen/er 1000 for processing settle- 
ment information that is exchanged with the service sys- 
tem 110 for an electronic credit card service; a 
8ubscrit>er information server 1001, for managing per- 
sonal informatfon for a subscrit>er to the credit service; 
a member store information server 1002, for managing 
the information for a store that is a member of the aedit 
servk;e; a transactfon information server 1003, for man- 
aging the transaction information for a credit settlement; 
and a management system 1006, with which the trans- 
actfon processor manages the operatfon of the transac- 
tion processing system 106. The servers 1000 to 1003 
and the management system 1006 are constituted t>y 
one or more computers. 

[0456] The transaction server 1000, the subscriber 
information senrer 1001, the member store information 
server 1002. and the transaction informatfon server 

1003 are respectively connected to an ATM-LAN switch 

1004 by ATM-LAN c^es 1008. 1009, 1010 and 1011. 
The transaction sen/er accesses, via the ATM-LAN 
9Mtoh 1004. the sut)scrlber information server 1001. 
the member store information server 1002, or the trans- 
action information server 1003. 

(0457] The ATM-LAN switch 1004 is connected to an 
ATM switeh 1005 by an ATM-LAN cable 1013. The dig- 
ital communication tine 131 for establishing a connec- 
tion with the service system 110 is connected to the 
ATM switch 1005. The transaction sewer comnwnicates 
with the service system 110 via the ATM-LAN switch 
1004 and the ATM switch 1005. 
[0458] In the electronic credit card service, the credit 
settlement process performed by the transaction 
processing system 106 is established wh&i. upon 
receiving a settlement request from the servk:e system 
110. the transaction sen/er 1000 updates information 
for the subscriber information server 1001 . the member 
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store infOfTTiation server 1002 artd the trar^ction infor- 
mation server 1003. 

[0459] The ATM switch 1005 is extended not only to 
the digrtal communication line 131 for effecting a con- 
nection with the service system 110, but also a bank 5 
dedicated line 1015 for connecting a t>ank on-line sys- 
tem, and a dedicated digital line 1016 for connecting the 
transaction processing system of another transaction 
processor. The transaction processing system 106 
communicates with the bank orvline system arKJ the io 
transaction processing system of another transaction 
processor, and performs a settlement process between 
financial institutions. 

[0460] The management system 1 006 is connected to 
the ATM-LAN switch 1007 by an ATM-LAN cable 1012. is 
and is also connected to the ATM switch 1005 tiy an 
ATM-LAN cable 1014. In order to manage the operation 
of the servce system 110, the management system 
1006 accesses the transaction server 1000, the sub- 
scriber information server 1 00 1 . the member store infer- 20 
mation server 1002. or the transaction infonmation 
sender 1003 via the ATM-LAN switch 1007. the ATM 
switch 1005 and the ATM-LAN switch 1004. 
[0461 ] The ATM switch 1005 serves as a data commu- 
nication switch (router) for conrvnunicatfen between the 25 
outskle and the inside of the transaction processing 
system 106. and for transaction processing system 106 
intercommunication. In additicn. the ATM switch 1005 
serves as a communication adaptor for handling multi- 
ple communication systems. For communication 30 
t)etween the transactkxi server 1000 and the service 
system 110, k)etween the trar^ction server 1000 and 
the bank on-line system, and between the transaction 
server 1000 and the transaction processing system of 
another transaction processor, the ATM switch 1005 35 
converts communication data in accordance with the 
indivkkjal communication systems 
[0462] The ticket issuing system 107 will now be 
explained. 

[0463] Fig. 11 is a block diagram illustrating the 40 
arrangement of the ticket issuing system 107. The ticket 
issuing system 107 comprises: a ticket issuing server 
1 100, for processing settiemerrt information (transaction 
information) ttiat is exchanged with the service system 
1 10 of the electronic ticket service; a customer informa- 45 
tion server 1101, for managing the purchase history 
information for a customer; a ticket issuing information 
server 1102, fa managing information conceming a 
ticket that has been issued and an installation card; a 
ticket infomiation server 1 1 03, for managing ticket stock so 
information; and a management system 1106. with 
which the ticket issuer manages the operation of the 
ticket issuing system 107. The servers 1100 to 1103 
and ttie management system 1106 are constituted by 
one or more computers. ss 
[0464] The tick^ issuing server 1100, the customer 
infomiation server 1101, tiie ticket issuing infonmation 
server 1 102. and the ticket information server 1 103 are 


respectively connected to an ATM-LAN switch 11 04 by 
ATM-LAN cables 1 108, 1109. 1 1 10 and 1 1 1 1 . The ticket 
issuing server accesses, via the ATM-LAN switch 1 104. 
the customer information server 1101. the ticket infor- 
mation server 1102, or the ticket information server 
1103. 

[0465] The ATM-LAN switch 1 104 is connected to an 
ATM switch 1 105 by an ATM-LAN cable 1 1 13. The dig- 
ital communication line 132 for connecting the service 
system 1 10 is connected to the ATM switch 1 105. The 
ticket issuing server comnujnk;ates with the service sys- 
tem 110 via the ATM-LAN switch 1104 and the ATM 
switch 1105. 

[0466] In the electronic ticket service, the ticket issuing 
process performed by the ticket issuing system 107 is 
estat}lished when, upon receiving a request from tiie 
service system 110, the ticket issuing server 1100 
Lpdates information for ttie customer information server 
1 101, the ticket issuing information server 1 102 and ttie 
ticket information server 1103, and transmits to the 
service system 1 10 the ticket information that is to be 
issued. 

[0467] The nrmnagement system 1 1 06 is connected to 
the ATM-LAN switch 1 107 by an ATM-LAN cable 1 1 12, 
and is also connected to ttie ATM switch 1105 by an 
ATM-LAN cable 1 1 14. In order to manage the operation 
of the ticket issuing system 107, the management sys- 
tem 1106 accesses the ticket issuing server 1100. ttie 
customer informatfon server 1101, the ticket issuing 
information server 1 1 02, or the ticket issuing information 
server 1103 via the ATM-LAN switch 1107, the ATM 
switch 1105 and ttie ATM-LAN switch 1104. 
[0468] The ATM switch 1 1 05 serves as a data commu- 
nication switch (router) for communication between the 
outside and ttie inside of ttie ticket issuing system 107 
and for ticket issuing system 107 intercommunication. 
[0469] The payment card issuing system 108 will now 
be explained. 

[0470] Fig. 12 is a block diagram illustrating ttie 
anangement of the payment card issuing system 108. 
The payment card Issuing system 108 comprises: a 
payment card issuing server 1200. for processing settie- 
merrt information (transaction information) ttiat is 
exchanged witti the service system 1 10 of ttie electronic 
payment card service; a customer information server 

1201, for managing the purchase history information for 
a customer; a payment card issuing information server 

1202, for managing information concerning a payment 
card that has been issued and an installation card; a 
payment card information server 1203, for managing 
payment card stock information; and a management 
system 1206, with which the payment card issuer man- 
ages the operatfon of the payment card issuing system 
108. The servers 1200 to 1203 and ttie management 
system 1206 are constituted by one or more conputers. 
[0471] The payment card issuing swver 1200, the 
customer information server 1201, ttie payment card 
issuing informatfon server 1202. and the payment card 
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information server 1203 are respectively connect^ to 
an ATM-LAN switch 1204 by ATM-LAN cables 1208. 
1209, 1210 and 1211. The payment card issuing server 
accesses, via the ATM-LAN switch 1204, the customer 
information server 1201, the payment card information 5 
server 1202. or the payment card information server 
1203. 

[0472] The ATM-LAN switch 1204 is connected to an 
ATM switch 1205 by an ATM-LAN cable 1213. The dig- 
ital communication line 133 fa connecting the service 10 
system 1 10 is connected to the ATM switch 1205. The 
payment card issuing saver communicates with the 
service system 1 10 via the ATM-LAN swrtch 1204 and 
the ATM switch 1205. 

[0473] In the electronic payment card service, the pay- 15 
ment card issuing process perlbrmed by the payment 
card issuing system 108 is established when, upon 
receiving a request from the service system 110, the 
payment card issuing server 1200 updates information 
for the customer information server 1201 . the payment 20 
card issuing infamation server 1202 and the payment 
card infonmation server 1203. and transmits the pay- 
ment card information that is to be issued to the service 
system 110. 

[0474] The management system 1 206 is connected to 25 
the ATM-LAN swrtch 1207 by an ATM-LAN cable 1212, 
and is also connected to the ATM switch 1205 by an 
ATM-LAN cable 1214. In order to manage the operation 
of the payment card issuing system 108. the manage- 
ment system 1206 accesses the payment card issuing 30 
sender 1200. the customer information server 1201. the 
payment card issuing information server 1202, or the 
payment card issuing information server 1203 via the 
ATM-LAN switch 1207, the ATM switch 1205 and the 
ATM-LAN switch 1204. 35 
[0475] The ATM swrtch 1205 serves as a data commu- 
nication swrtch (router) for communication between the 
outside and the inside of the paymerrt card issuing sys- 
tem 108 and for payment card issuing system 108 inter- 
communication. 40 
[0476] The telephone card issuing system 109 will 
now be explained. 

[0477] Rg. 13 is a block diagram illustrating the 
arrangement of the telephone card issuing system 109. 
The telephone card issuing system 109 comprises: a 4S 
telephone card issuing server 1300, for processing set- 
tlement infamation (transaction information) that is 
exchanged wrth the service system 1 10 of the electronic 
telephone card service; a customer information server 

1 301 , for managing the purchase history information for so 
a customer: a telephone card issuing information server 

1302, for managing information concerning a telephone 
card that has been issued and an installation card; a tel- 
ephone card information server 1303. for managing tel- 
ephone card stock information; and a managenDent 55 
system 1306, wrth which the telephone card issuer 
manages the operation of the telephone card issuing 
system 109. The servers 1300 to 1303 and the manage- 


ment system 1306 are constituted by one or more com- 
puters. 

[0478] The telephone card issuing server 1300. the 
customer information server 1301. the telephone card 
issuing information server 1302 and the telephone card 
information server 1303 are respectively connected to 
an ATM-LAN switch 1304 by ATM-LAN cables 1308, 
1309. 1310 and 1311. The telephone card issuing 
server accesses, via the ATM-LAN swrtch 1304. the 
customer information server 1301. the telephone card 
information server 1302. or the telephone card informa- 
tion server 1303. 

[0479] The ATM-LAN switch 1304 is connected to an 
ATM swrtch 1305 by an ATM-LAN cable 1313. The dig- 
ital communication line 134 fa connecting the service 
system 1 10 is connected to the ATM switch 1305. The 
telephone card issuing server communicates witii tiie 
service system 110 via the ATM- LAN swrtch 1304 and 
the ATM swrtch 1305. 

[0480] In the electronic telephone card service, tiie 
telephone card issuing process perfamed by the tele- 
phone card issuing system 109 is established when, 
upon receiving a request from tiie service system 1 10. 
tiie telephor>e card issuing sender 1300 updates infor- 
mation fa the customer information sen/er 1301. tiie 
telephone card issuing information server 1302 and tiie 
telephone card infamation server 1303. and transmrts 
the telephone card information that is to t)e issued to the 
service system 110. 

[0481 ] The management system 1 306 is connected to 
the ATM-LAN swrtch 1307 by an ATM-LAN cable 1312, 
and is also connected to the ATM swrtch 1305 by an 
ATM-LAN cable 1314. In order to manage the operation 
of the telephone card issuing system 109, the manage- 
ment system 1306 accesses the telephone card issuing 
server 1300, the customer infamation server 1301, tiie 
telephone card issuing information sender 1302, or the 
telephone card issuing information server 1303 via the 
ATM-LAN swrtch 1307. tiie ATM swrtch 1305 and tiie 
ATM-LAN swrtch 1304. 

[0482] The ATM swrtch 1 305 serves as a data commu- 
nication swrtch (router) for communication between tiie 
outside and tiie inside of the telephone card issuing sys- 
tem 109 and for telephone card issuing system 109 
intercommunication. 

[0483] Fig. 1 4 is a schematic diagram fa an installa- 
tion card for an electronic payment card, an electronic 
telephone card, or an electronic ticket. Figs. 14A and 
14B are diagrams showing tiie reverse side and tiie 
obverse side of an installation card 1400 for an elec- 
tronic payment card; Figs. 14C and 14D are diagrams 
showing tiie reverse side and the obverse side of an 
installation card 1400 for an electi-onic telephone card; 
and Figs. 14E and 14F are diagrams showing tiie 
reverse side and tiie obverse side of an installation card 
1400 fa an electronic ticket. 

[0484] Basically, installation information and informa- 
tion required for installation, such as installation proce- 
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dures, are primed on the reverse side of the installation 
card, and a desired design is printed on the obverse 
side. 

[0485] For example, the installation card 1400 for the 
eJectronic payment card represents a value of 1 0. 000 (a s 
currency unrt. or a unit or a product, or a service to be 
provided). 

[0486] On the reverse side are printed an installation 
card type 1403, a numerical value 1404 representing 
the worth of an electronic payment card to be installed; io 
installation procedures 1405: a holographic logo 1406; 
an installation card nunr^r 1407, which represerrts the 
type of electronic payment card that is to be installed; 
and an installation number 1408. which corresponds to 
an identification number in the same type of electronic 75 
payment card. 

[0487] The holographic logo 1406, which is difficult to 
copy, is provided not only for the design txjt also to pre- 
vent the counterfeiting of the installation card. There- 
fore, to prevent counterfeiting, a micro character or a 20 
micro pattern may be printed instead of the holographic 
logo 1406. 

[0488] The installation card numt>er 1407 consists of 
an arbitrary 8<figit nunrt>er that represents the etec- 
tronic payment card type, and is printed as two sets of 2s 
four numerals each. The installation numt>er 1408 oon- 
sists of an arbitrary 32<jigit nunt>er that is selected at 
random, and is printed as sets of four numerals each 
that are arranged in four rows and two columns. The 
combination of the installation card number 1407 and 30 
the installation nurTi)er 1408 constitutes the relevant 
identification information for the electronic payment card 
that is to be installed, tn order to prevent the leakage of 
identification irrformation during distribution, a coating is 
applied to tiie portion wha^eon the installation card 3S 
number 1407 and the installation number 1408 are 
printed, and the coating must be saatched off before 
the numbers can be seen. That is, when tiie installation 
card is sold or transferred tiie applied coating is intact, 
arxi the coating is not saatched off until the electronic 40 
payment card is installed in tiie mobile user terminal 
100. 

[0489] During the installation procedures, first, the 
coating (scratch portion) is removed. Then, the mobile 
user terminal 1(K) is set to the payment card mode and 4S 
the operating menu for the payment card mode ^ dis- 
played using the function switch (F4). When tiie menu is 
selected, the installation saeen is displayed. Fottowing 
this, the installation card numt>er and the installation 
number are entered and the execution switch is so 
pressed. Through the performance of this operation, 
installation information is exchanged by the mobile user 
terminal 100 and the service system 110, and the elec- 
tronic payment card is installed in the mobile user termi- 
nal 100. 55 
[0490] For the installation card 1 40 1 for the electronic 
telephone card a value of 5.000 (a cun'ency unit, or a 
unit of the wireless telephone communication service 


tiiat Is to be provided) is indicated. In the same manner 
as for the installation card 1400 for the electronic pay- 
ment card, on tiie reverse side are printed an installa- 
tion card type 1409, a numerical value 1410 that 
represents the worth of an electronic telephone card to 
be Installed; installation procedures 1411 ; a holographic 
logo 1412; an 8-digit installation card number 1413 that 
represents tiie type of electronic telephone card that is 
to be installed; and a 32-digit installation number 1414 
that corresponds to an identification number for tiie 
same type of electronic telephone card. The coating is 
applied to the portion whereon the installation card 
number 1413 and the installation card number 1414 are 
printed. 

[0491] During the installation procedures, first, tiie 
coating (saatch portion) is removed. Then the mobile 
user terminal is set to the telephone card mode and the 
operating menu of the telephone card mode is displayed 
by using tiie function switch (F4). When tiie menu is 
selected, the installation screen is displayed. Following 
this, the installation card numt>er and the installation 
nurTt)er are entered, and the execution switch is 
pressed. Through the performance of this operation, 
installation information is exchanged by tiie mobile user 
terminal 100 and the service system 1 10. and the elec- 
fronic telephone card is installed in tiie mobile user ter- 
minal 100. 

[0492] For an installation card 1402 for an electronic 
ticket, infonmation concerning the contents of an elec- 
tronic ticket to be installed, such as the date and place 
of an event, is printed on the obverse side. And as for 
the installation card 1400 for the electi^onic payment 
card, on the reverse side are printed an installation card 
type 1415; installation procedures 1417; a holographic 
logo 1418; an 8<ligit installation card number 1419 that 
represents the type of an electi^onic ticket to be 
installed: and a 32-dlglt installation number 1420 that 
corresponds to an identification number for the same 
type of electronic ticket. The coating is applied to the 
portion whereon the installation card number 1419 and 
the installation card number 1420 are printed. In addi- 
tion, an installation limit 1416 for an electronic ticket is 
printed on the reverse side of tiie installation card 1402 
for the electronic ticket 

[0493] During the installation procedures, first, tiie 
coating {scratch portion) is removed. Then, the ax)bile 
user terminal is set to the ticket mode and the operating 
menu for tiie ticket mode is displayed by using the func- 
tion switch (F4). When the menu is selected, the instal- 
lation saeen is displayed. Following tiiis, tiie installation 
card number and the installation numt>er are entered 
and the execution switch is depressed. Through the per- 
formance of this operation, installation information is 
exchanged by tiie mobile user terminal 100 and tiie 
service system 1 10, and the electronic ticket is installed 
in tiie mobile user ternnnal 100. 
[0494] In the above description, the Installation card 
has the shape of a carti composed of paper, plastic or 
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vinyl chloride. However, any shape can be employed so 
long as it can be handled by normal distribution chan- 
nels and so long as installation irrformation that corre- 
sponds to the installation card number and the 
installation number can be recorded thereon. A desired 5 
form can be employed to record the installation informa- 
tion. For exanrple, in printed material, such as a book or 
a magazine, installation information may be recorded on 
one of the pages, or installation information may be 
printed on the surface or the label of a three-dimen- w 
sional product such as a beverage can. Further, the 
installation information may be recaded as electronic 
information in a software package, such as a computer 
software program. 

[0495] When an installation card and anotiier product is 
are corTt>ined. the two can be employed as a lottery 
prize, or can be distritxited and sold as a composite 
product Further, the distrixition costs for the installa- 
tion card can be reduced, its range of usage can be 
expanded, and its popularity can be increased. 20 
[0496] An explanation will now be given for the hierar- 
chial data management function performed between the 
sen^ice system 110 and the mobile user t&^minal 100, 
the gate termrnat 101. the merchant terminal 102. the 
merchant terminat 103, the automatic vending machine 2s 
104, or the electronic telephone card accounting device 
800. 

[0497] Since the system of the invention handles infor- 
mation concerning a money transaction, such as the 
purchase of an eledronic payment card and tiie settie- 30 
ment process perfonmed using that card, high security is 
required. It is one object of this system to provide a sim- 
ple operation that makes it possible for an ordinary user 
to handle information at a high level of security and in a 
mobile environmerrt. 35 
[0498] To inplement this system function, the service 
system 110 manages the data stored in the mobile user 
temninal 100. the gate tern^nal 101. the merchant termi- 
nals 102 and 103. the automatic vending machine 104. 
and the electronic telephone card acoourrting devk;e 40 
800. The service system 1 10 stores master data for the 
data stored in tiie mobile user terminal 1 00. the gate ter- 
minal 101. the merchant terminals 102 and 103, the 
automatic vending machine 104. and the electronic tel- 
ephone card accounting device 800. Periodically, tiie 4S 
data are mutually updated by the mobile user temninal 
100, tiie gate terminal 101. the merchant terminals 102 
and 103. the automatic vending machine 104 and the 
electronic telephone card accounting device 800. and 
the sen^tee system 1 1 0. At this time, tiie service system so 
110 oorrpares the master data with the data stored in 
the mobile user terminal 100, the gate terminal 101 . the 
merchant terminals 102 and 103. tiie automatic vending 
machine 104 and the electrons telephone card 
accounting device 800. and determines whether an ille- ss 
gal alteration has been performed. The internal data are 
updated so that information that is frequently accessed, 
or comparatively new information is stored on the local 


storage medium (a RAM or a hard disk) belonging to tiie 
mobile user terminal 100, the gate terminal 101. tiie 
merchant terminals 102 and 103, tiie automatic vending 
macNne 104, or the electronic telephone card account- 
ing device 800. 

[0499] With this function, an illegal act by a user or a 
merchant can be prevented, and tiie loss of data due to 
an accident can be prevented, ttiereby inaeasing tiie 
safety of tiie system. In additfon. the owners of tiie 
mobile user terminal 100, the gate terminal 101. tfie 
merchant terminals 102 and 103. the automatic vending 
machine 104, and the electronic telephone card 
accounting device 800 do not have to back up internally 
stored data, and only a small memory capacity is 
required for tiie local storage medium for tiie mobile 
user terminal 100, the gate terminal 101. the merchant 
terminals 102 and 103, the automatic vending machine 
104, or the electronic telephone card accounting device 
800. As a result, the manufacturing costs and the sizes 
of these devk;es can be reduced. Hereinafter, tiiis func- 
tion is called a network hierarchial storage and manage- 
ment function. 

[0500] When the mobile user terminal 100. the gate 
tenninal 101 and the merchant tenminals 102 and 103 
access the data stored in the service system 1 10, tiie 
n^work hierarchial storage and management function 
downtoads the data from tiie service system 110. The 
data updating process is a process whereby the mobile 
user temiinal 100, the gate terminal 101. the merchant 
terminals 102 and 103. the automatic vending machine 
104, or the electronic telephone card accounting device 
800 periodically accesses the service system to update 
internally stored data. The fordble data updating proc- 
ess is a process whereby the service system fordbty 
updates the data stored in the mobile user terminal 1 00. 
tiie gate terminal 101, tiie merchant terminals 102 and 
103. the autonr^tic vending machine 104, or the elec- 
tronic telephone card accounting device 800. The data 
backup process is a process whereby tiie mot>ile user 
terminal 100 or tiie merchant terminat 103 automatically 
makes a backup of the internal data in the servk;e sys- 
tem when the remaining battery power is reduced to a 
specific level. 

[0501] In Fig. 56A is shown the remote access 
processing performed by the mobile user terminal 100 
and tiie service system 1 10. 

[0502] To access data in the service system, tiie 
mobile user terminal 100 tiansmits to the service sys- 
tem a remote access request 5600. which is a data 
request nDessage. Upon receiving the remote access 
request 5600. the service system generates remote 
access data 5601 . which is a message that includes the 
requested data, and transmits it to the mobile user ter- 
minal 100. The mobile user terminal 100 then accesses 
the received data. 

[0503] Similarly, in Fig. 57A is shown the remote 
access processing performed by the service system 
1 10 and the gate terntinal 1 01 , or the merchant terminal 
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102 or 103. 

[0504] To access data in the service system, the gate 
terminal 101 (or the merchant terminal 102 or 103) 
transmits to the service system a remote access 
request 5700, which is a data request message. Upon s 
receiving the remote access request 5700, the service 
system generates remote access data 5701 , which is a 
message that includes the requested data, and trans- 
mits it to the gate tenrnnal 101 (the merchant terminal 
1 02 or 1 03). The gate terminal 101 (the merchant term!- io 
nal 102 or 103) then accesses the received data. 
[0505] In Rg. 56B is shown the data update process- 
ing performed by the mobile user terminal 100 and the 
service system 110. 

[0506] When a time designated in advance by the is 
service sy^em is reached, the mobile user terminal 100 
transmits to the service system 110 a data update 
request 5602, which is a message requesting the per- 
formance of a process for ipdating the internal data. 
The service system 110 generates a data update 20 
response 5603, which Is a message indicating the 
range of the data that is to be uploaded to the service 
system, and transmits it to the mobile user terminal 100. 
[0507] The mobile user terminal 100 generates the 
data to be uploaded to the service system, and trans- 25 
mits to the service system upload data 5804, which is a 
message for the uploading of the internal data of the 
mobile user terminal to the service system. 
[0508] The service system examines the received 
data, generates data to update the internal data of the 30 
mobile user terminal 100, and transmits to the mobile 
user temiinal 100 iqadate data 5605. which is a mes- 
sage lor the updating of the internal data held by the 
mobile user terminal 100. Upon receiving the update 
data 5605, the mbWe user terminal 100 updates the 35 
internal data. 

[0509] When the service system discovers an illegal 
alteration in the downloaded data, instead of the update 
data 5605 the service system transmits a mandatory 
expiration 5605*. which is a message for the hatting of 40 
the function of the mobile user terminat. 
[0510] Likewise, in Fig. 57B is shown the data updat- 
ing processing performed by the service system 110 
and the gate terminal 101 , the merchant terminal 102 or 
103, the automatic vending machine 104, or the elec- 45 
tronic telephone card accounting device 800. 
[0511] When the time designated in advance by the 
sendee system is reached, the gate terminal 101 (the 
merchant tenninal 102 or 103. the automatic vending 
machine 104. or the electronic telephone card account- so 
ing device 800) transmits to the service system 110 a 
data update request 5702, which is a message request- 
ing the performance of the process for updating the 
internal data. The service system 110 generates a data 
update response 5703, which is a message irrJicating ss 
the range of the data to be iploaded to the service sys- 
tem, and transmits it to the gate terminal 101 (the mer- 
chant terminal 102 or 103. the automatic vending 


machine 104, or the electronic tel^hone card account- 
ing device 800). 

[05121 The gate terminal 101 (the merchant terminal 
102 or 103. the automatic vending machine 104. or the 
electronic telephone card accounting device 800) gen- 
erates the data to be uploaded to the service system, 
and transmits to the service system upload data 5704. 
which is a message for the uploading of the internal 
data to the service system 1 10. 
[051 3] The sen^ice system examines the downloaded 
data, generates data to update the interna! data of the 
gate terminal 101 (the merchant terminal 102 or 103, 
the automatic verxiing machine 104. or the electronic 
telephone card accounting device 800), and transmits 
update data 5705. which is a message for the updating 
of the Internal data, to the gate tenminal 101 (the mer- 
chant terminal 102 or 103, the automatic vending 
machine 104, or the electronic telephone card account- 
ing device 800). Upon receiving the update data 5705, 
the gate tenr^nal 101 (the merchant terminal 102 or 
103. the automatic vending machine 104. or the elec- 
tronic telephone card accounting device 800) updates 
the internal data. 

[0514] When the service system discovers an illegal 
alteration in the downloaded data, in^ead of the update 
data 5705 the service system transmits a mandatory 
expiration 5705'. which is a message for the halting of 
the function of the gate terminal 101 (the merchant ter- 
minal 102 or 103, the automatic verxiing machine 104, 
or the electronic telephone card accounting device 
800). 

[051 5] In Fig. 56C is shown the forcible data updating 
processing performed by the mobile user terminal 100 
and the service system 1 10. 

[0516] When internal data t>elonging to the mobile 
user terminal 100 must be updated quickly because, for 
exanple, the terms of a contract with a user have been 
changed, first, the service system 110 generates a data 
update instruction 5606, which is a message instructing 
the mobile user terminal 100 to perform the forcble data 
updating process, and transmits it to the mobile user 
terminal 100. 

[0517] The mobile user terminal 100 generates data 
to be uploaded to the service system, and transmits, to 
the service providing system, upload data 5607. which 
is a message directing the uploading of the internal data 
held by the mobile user terminal. 
[051 8] The service system examines the downloaded 
data, generates data for updating the mobile user termi- 
nal 100 and transmits to the mobile user terminal 100 
update data 5608. which Is a message directing the 
i^xlating of the data held by the mobile user terminal 
100. Upon receiving the update data 5608 the mobile 
user terminat 100 updates the internal data. 
[0519] When the service system discovers an illegal 
alteration in the dowrdoaded data, instead of the update 
data 5608 the service system transmits a mandatory 
expiration 5608'. which is a message for the halting of 
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the function of the mobile user terminal. 
[0520] In Fig. 570 is shown the forcible data updating 
processing performed by the service system 110 and 
the gate terminal 101 (the merchant terminal 102 or 
103, the automatic vending machine 104. or the elec- s 
tronic telephone card accounting de^ce 800). 
[0521] When the data held by the gate terminal 101 
(the mercham terminal 102 or 103. the automatic vend- 
ing nnachine 104, or the electronic telephone card 
accounting device 800) must be updated quickly io 
because, for example, the temis of a contract with a 
user have been dianged, first, the service system 110 
generates a data update instruction 5708, which is a 
message instructing the performance of the forcible 
data updating process by the gate terminal 101 (the is 
merchant terminal 102 or 103. the automatic vending 
machine 104, or the electronic telephone card account- 
ing device 800). and transmits it to the mobile user ter- 
minal 100. 

[0522] The gate terminal 101 (the merchant tenninal 20 
102 or 103. the automatic vending machine 104 or the 
electronic telephone card accounting device 800), gen- 
erates data to be uploaded to the service system, and 
transmits uplo^ data 5707. which is a message for 
uploading the internal data to the service system 100. 25 
and transmits it to the service system. 
[0523] The service system examines the downloaded 
data, generates data for updating the gate terminal 101 
(the merchant terminal 102 or 103, the automatic vend- 
ing machine 104 or the electronic telephone card so 
accounting device 800), and transmits update data 
5708, which is a message for updating the data held by 
the mobile user terminal 100, to the gate terminal 101 
(the merchant terminal 102 or 103, the automatic vend- 
ing machine 104 or the electronic telephone card 35 
accounting device 800). The gate terminal 101 (the 
merchant terminal 102 or 103. the automatic vending 
machine 104 or the electronic telephone card account- 
ing device 800) receives the ipdate data 5708 and 
updates the internal data. 40 
[0524] When the service system discovers an illegal 
alteration In the downloaded data, instead of the update 
data 5708 the service system transmits a mandatory 
expiration 5708'. which is a message for the hatting of 
the function of the gate temninal 101 (the merchant ter- as 
mtnal 102 or 103. the automatic vending machine 104 
or the electronic telephone card accounting device 
800). 

[0525] In Fig. 56D Is shown the data backup process- 
ing perfomied by the mobile user terminal 100 and the so 
sen^ice system 110. The data backup process is per- 
formed substantially in the same manner as for the data 
updating process. It should be noted, however, that the 
mobile user terminal 100 t^egins the data backup proc- 
ess when the remaining t>attery capacity is reduced ss 
until it is equal to or kM^er than Q. and further, that after 
the mobile user tenminal 1 00 receives i^xlate data 561 2 
and updates the internal data, the mobile user temninal 


100 prohibits the entry of new data until an adequate 
battery capacity has been attained. 
[0526] Similarly, in Fig. 57D is shown the data backup 
processing performed by the merchant temninal 103 
and the service system 1 10. The data backup process 
is also performed substantially in the same manner as is 
the data updating process. It should be noted, however, 
that the merchant terminal 103 begins the data backup 
process when the remaining battery capacity is reduced 
until It is equal to or lower than Q. and further, that after 
the merchant tern^nal 103 receives update data 5712 
and updates the internal data, the merchant terminal 
103 prohibits the entry of new data until an adequate 
battery capacity has been attained. 
[0527] A detailed explanation will be given later for the 
contents of the messages that are exchanged by the 
devices during the individual processes performed tsy 
the above network hierarchial storing and management 
function. 

[0528] An explanatbn will now be given for the man- 
agement of an electronic ticket, an electronic payment 
card, and an electrons telephone card that are issued. 
[0529] In this system, the electronic ticket, the elec- 
tronic payment card, and the electronic telephone card 
are managed separately, since while one will be regis- 
tered arKTther will not. Registration in this case means 
that a user registers, with the service system, an elec- 
tronic tk^ket an electronic payment card, or an elec- 
tronic telephone card that he or she will use personally. 
[0530] Since in this system an electronk: tk:ket, an 
etectronk; payment card, or an electronic telephone 
card that has been purchased can be transfen-ed to 
another user, a purchaser does not always use what he 
or she has bought. In particular, a large number of elec- 
tronic payment cards or electronic telephone cards, 
such as magnetic telephone cards, are expected to be 
maintained in the steeping state and not used. 
[0531] If an unused electronic ticket, an unused elec- 
tronic payment card and an unused electronic tele- 
phone card are managed in the same manner as those 
that are to be used, the system operation is very waste- 
ful. Therefore, this system manages the tickets or cards 
that are to be used and those that are not to be used 
separately 

[0532] Specificaity. the electronic ticket, electronic 
payment card or electronic telephone card that is pur- 
chased or transferred is managed by the user informa- 
tion server 902 of the service system 110. while it is 
regarded as being owned by the user. Before the user 
employs the electronic ticket, electronic payment card or 
electronic telephone card, he or she registers it with the 
servtee system. The service system registers, in the 
service director information server 901. the electronic 
ticket, electronic payment card or electronic telephone 
card as one that is being used by the user. The registra- 
tion process can be performed any tinne and anywhere 
by empbying digital wireless telephone communicatk>n. 
[0533] A detailed explanation will be given later for the 
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registration of an electronic ticket, an electronic pay- 
ment card, or an electronic telephone card. 
[0534] The mobile electronic commerce services pro- 
vided by the system of the invention will now be 
explained. s 
[0535] Of the four services, an electronic ticket service 
will be described first. 

[0536] The electronic ticket service mainly includes 
ten different processes: ticket order, ticket purchase, 
ticket registration, ticket setip, ticket examinatk}n, ticket io 
reference, ticket trar^r. electronic ticket installation, 
ticket modification, and ticket refund. 
[0537] The ticket order process is a process whereby 
a user applies for an electronic ticket to the ticket issuer 
The ticket purchase process is a process whereby the is 
user purchases the electronic ticket applied for through 
the ticket order. The ticket registration process is a proc- 
ess whereby a user registers, with the service system, a 
tktet that he or she has purchased or has been giv&i. 
The ticket setup process is a process whereby an oper- 20 
ator (merchant) of a gate terminal 101 sets up a ticket 
for examination at the gate terminal. The ticket refer- 
ence process is a process whereby the gate terminal 
queries the service system concerning the validity of an 
electronic ticket that is examined. The tki^ tr^isfer 2s 
process is a process whereby an electronic ticket is 
transferred. The electronk; ticket installation process is 
a process whereby an electronic ticket is installed in the 
nrKSbile user terminal 100 using an electronic ticket 
installation card. The ticket nrxxlification process is a 30 
process whereby the tk:ket issuer changes tiie contents 
of a ticket that has been issued. And the ticket refund 
process is a process whereby the cost of a ticket, calcu- 
lated while taking into consideration any alterations to 
the ticket, is refunded. 35 
[0538] In Rg. 58 is shown the ticket order processing. 
[0539] First, the user sets the mobile user terminal 
100 to the ticket ntode and uses tiie function switch (F4) 
to display tiie operating menu for the ticket nruxje. The 
user tiien selects "ticket purchase." and the ticker order 4c 
screen is displayed on the LCD. Following this, the user 
employs the function switch 307 and the number key 
switch 308 to select a ticket issuer and to enter an order 
code for a desired trcket a desired date and a desired 
number of tickets, and depresses the execution switch 45 
311 (ticket order operation 5800). The mobile user ter- 
minal transmits, to the service system, a ticket order 
5801, which is a message used to apply for an elec- 
tronk: ticket. Upon receiving the tk:ket order 5801. the 
sersnce system transmits, to the ticket issuing system so 
107, a ticket order 5802, which is a message for apply- 
ing for a ticket. 

[0540] Upon receiving the ticket ader 5802 at the 
tki^t issuing system, tiie ticket issuing server 1100 
enploys tiie customer information in the customer infor- 55 
noatwn server 1101 and tiie information concerning the 
ticket issuarxie condition in the XkkeX information server 
1103. and generates a ticket order response 5803, 


which is a response message for the ticket order 5802. 
Thereafter, the ticket order response 5803 is transmit- 
ted to the service system. 

[0541] When tiie ticket that tiie user desires can be 
issued, the ticket order response 5803 includes a seat 
number for the ticket to be issued and a ticket sales offer 
(ticket sales offer), which conveys the phce quoted for 
the ticket. When the ticket that tiie user desires can not 
be issued, tiie ticket sales offer is not included. 
[0542] Upon receiving the ticket order response 5803. 
ttie service system generates a ticket order response 
5804, which is a response message for the ticket order 
5801, and transmits it to the mot}ile user terminal. 
[0543] Upon receiving the ticket order response 5804. 
the nrxsbile user terminal displays the contents of the 
ticket order response 5804 on the LCD 303 (display of 
tiie ticket order response: 5805). When the ticket sales 
offer is included in the ticket order response 58034. the 
ticket sales offer is displayed on the LCD. When tiie 
ticket sales offer is not included, a message indicating 
the ticket can not be issued (response message 9016: 
Fig. SOB) is displayed on the LCD. 
[0544] In Fig. 59 is shown the ticket purchase process- 
ing. 

[0545] The ticket purchase processing is initiated 
when the tk^ket sales offer is displayed on tiie LCD as 
the result of tiie ticket order process. 
[0546] The ticket sales offer includes two operating 
menus: "purctiase" and "cancel." When "cancer is 
selected, the ticket sales offer is canceled. When "pur- 
chase" Is selected, the purchase order screen appears 
on the LCD. On the purchase order screen the user des- 
ignates a credit card to be used for payment and the 
number of payments, enters a code number, and 
depresses tiie execution switch 311 (ticket pu-chase 
order operation 5900). Then, the mobile user terminal 
transmits, to the service pro\^ding system, a M^i pur- 
chase order 5901, which is an order message fa tiie 
purchase of an electronic ticket. Upon receiving tiie 
ticket purchase order 5901. the service providing sys- 
tem transmits, to tiie ticket issuing system 107. a ticket 
purchase order 5902. which is an order message for the 
purchase of a tk:ket. 

[0547] Upon tiie ticket purchase order 5902 being 
received by the ticket issuing system, the ticket issuing 
server 1 100 updates tiie data in the customer informa- 
tion server 1 101 , in the ticket issuing information server 
1102, and in ttie ticket information server 1103. The 
ticket issuing server 1 100 generates ticket data for the 
ordered ticket, and transmits, to tiie service provkling 
system, an electronic ticket issuing commission 5903, 
which is a message requesting ttie issuance of a conre- 
sponding electronic ticket and the establishment of a 
ticket price. 

[0548] Upon receiving tiie electronic ticket issuing 
oommissbn 5903, the service providing system trans- 
mits, to the transaction processing system, a clearing 
request 5904. whidi is a message requesting the clear- 
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ance of the price of the ticket. . . 

[0549] Upon the clearing request 5904 being received 
by the transaction processing system, the transaction 
server 1000 updates data in tiie subscriber information 
server 1001, in the member store information server s 
1002 and in the transaction Information sender 1003, 
perlorms a clearing process for the credit card, and 
transmits to tiie service providing system a clearing 
completion notification 5905, which Is a message indi- 
cating the clearing process has been completed. io 
[0550] Upon receiving tiie clearing completion notifi- 
cation 5905, the service providing system generates a 
clearing completion rx)tification 5906, which is a mes- 
sage indicating the clearing process has been com- 
pleted, and transmits it to the ticket issuing system. In is 
addition, the service providing system generates an 
electronic ticket to be issued to the user. 
[0551] Upon receiving tiie clearing conpletion notifi- 
cation 5906. the ticket issuing system generates and 
transmits to the service providing system a receipt 20 
5907, which is a message corresponding to the receipt 
of the ticket sale. 

[0552] Based on the received receipt 5907, tiie sen^- 
ioe providing system generates a receipt 5909, wtiich is 
a receipt message for the user, and transmits it to the 25 
mobile user terminal, together with an electronic ticket 
issuance message 5908 that includes the elecbx)nic 
ticket ttiat is generated. 

[0553] Upon receiving the electronic ticket issuance 
message 5908 and the receipt 5909, the mobile user 30 
terminal displays the purchased electronic ticket on the 
LCD (display the electronk; tk:ket: 5910). At this time, a 
dialogue message is also displayed on the LCD to reg- 
ister the electronic ticket that has been purchased. 
When the user selects "register," the mobile user termi- 35 
nal initiates the ticket registration process. 
[0554] The ticket registration processing is shown in 
Fig. 65A, 

[0555] The ticket registration process is begun when 
the dialogue message is displayed on the LCD to regis- 40 
ter an electronic ticket for use. To display the dialogue 
message for tiie registration tor use. tiie execution 
switch 31 1 is depressed immediately after the electronic 
ticket is purchased, or while an electronic ticket that has 
not yet been registered is displayed ("unregistered" is 45 
displayed for the state of the ticket). 
[0556] The dialogue message for registration has two 
operating menus: "register" and "cancel." When tiie 
user selects "cancel." the ticket registration process is 
canceled. When the user selects "register" (registration so 
operation tor an eledronic ticket: 6500), the mobile user 
tenninal transmits, to the service providing system, a 
ticket registration request 6501, which is a message 
requesting the regisb-ation of an electronic ticket. In the 
service providing system, the service server 900 com- 55 
pares tiie contents of tiie received ticket registration 
request 6501 witii tiie user infomnation in tiie user infor- 
mation server 902. The service server 900 updates tiie 


. management information that is stored in the servk;e 
director information server 901 for an electronic ticket 
tiiat has been registered. The service server 900 regis- 
ters the electronic ticket, and transmits, to the mobile 
user terminal, a ticket certificate issuance message 
6502 that includes a certificate tor the registered elec- 
tronic ticket. 

[0557] Upon receiving tiie ticket certificate 6502, the 
mobile user terminal displays the registered electronic 
ticket on the LCD ("registered" is displayed as tiie state 
of the ticket) (display a registered ticket: 6503). 
[0558] The examination target ticket processing is 
shown in Rg. 66. 

[0559] The gate terminal 101 may perform the data 
updating processing to set up an electronic ticket for 
examination. In this embodiment, however, tiie mer- 
chant sets up a target ticket. 

[0560] First, the operator (merchant) of the gate termi- 
nal 101 sets tiie gate terminal to tiie ticket setup mode, 
and dsplays the setup screen on tiie touch panel LCD 
401 . The operator (merchant) then emptoys the number 
key switch 403 to enter tiie ticket code that designates 
the electi'onic ticket tiiat is to be set up tor the gate ter- 
minal, and presses the "set" button on the screen (ticket 
setup operation 6600). Then, tiie gate terminal tBns- 
mits^ to the service providing system, a ticket s&tup 
l^uest 6601 , whk;h is a message requesting the setup 
of the designated electronic ticket. 
[0561 ] Upon receiving tiie ticket setup request 660 1 , 
tiie service providing system transmits, to tiie mobile 
user terminal, a ticket setup message 6602 tiiat 
includes an examination program module for the desig- 
nated electronic ticket. 

[0562] Upon receiving tiie ticket setup message 6602, 
tiie mobile user terminal displays, on the touch panel 
LCD, a message indicating that the ticket setup 
processing has been completed (setup completion dis- 
play 6603). 

[0563] The ticket examination processing is shown in 
Fig. 67. 

[0564] First, the user sets tiie mobile user terminal to 
tiie ticket mode and employs the function switoh (F1 or 
F2) to display a ticket that is to be examined. The user 
depresses tiie execution switoh 31 1, while directing tiie 
infrared communication port 300 toward the infrared 
communication module of tiie gate terminal (ticket pres- 
entation operation 6700). Then, tiirough infrared com- 
munication, the mobile user terminal transmits, to the 
gate terminal, a ticket presentation message 6701 tor 
presenting the coments of tiie ticket to the gate terminal. 
[0565] Upon receiving the ticket presentation mes- 
sage 6701, the gate terminal examines the ticket type 
and transmits to the mobile user terrrvnal. via infrared 
oomnrunication, a ticket examination message 6702 
tiiat includes a command tor changing the state of tiie 
electronic ticket to the examined state. 
[0566] Upon receiving the ticket examination message 
6702, the mobile user terminal changes the state of the 
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electronic ticket to the examined state, and transmits a 
ticket examination response 6703. which is a message 
indicating the changed state of the electronic ticket, to 
the gate tern^nal via the infrared communication. 
[0567] Upon receiving the ticket examination s 
response 6703, the gate terminal examines the con- 
tents of the ticket examination response 6703, and 
transmits an examination certificate 6704, which is a 
message indicating the electronic ticket has been exam- 
ined, to the mobile user terminal via infrared communi- io 
cation. The results of the examination are displayed on 
the touch panel LCD (display examination results: 
6705). 

[0568] Upon receiving the examination certificate 
6704, the mobile user terminal displays the examined is 
ticket on the LCD ('examtned" is displayed as the state 
of the ticket) (display the examined ticket: 6706). 
[0569] Then, the operator (merchant) of the gate ter- 
minal permits the entrance of the user in accordance 
with the examination results that are displayed on the 20 
touch panel LCD (entrance permission 6707). When the 
gate opening/dosing devk^ is connected to the gate 
terminal, the gate is automatically opened (entrance 
permission 6707). 

[0570] The tk^ket reference processing is shown in 2s 
Fig. 71. 

[0571] The tk;ket reference process is not performed 
in accordance with a special processing sequence, but 
is performed during the data i^xiating processing dur- 
ing which the service providing system updates the data 30 
in the gate terminal. 

[0572] When a time that has been set in advance is 
reached, the gate terminal automatically initiates the 
data updating process, and transmits, to the service 
providing system, a data update request 5702. which is 35 
a message requesting that the data updating process 
be performed. 

[0573] The service providing system thereafter trans- 
mits, to the gate t&'minal. a data Lq3date response 5703, 
whk;h is a nDessage transmitted as a reply to the data 40 
tpdate request 5702 that was received. 
[0574] The data update response 5703 includes infor- 
matk)n indicating the range of the data that is to be 
uploaded (update option code 8609: Fig. 88B). Upon 
receiving the data update response 5703. the gate ter- 4s 
minal generates and transmits, to the service providing 
system, upload data 5704. which is a message in which 
is included the data that is to be uploaded to the service 
providing system. At this time, the upload data 5704 
includes information fa a new electronic ticket that is so 
being examined by tiie gate terminal. 
[0575] In the service providing system, the service 
server 900 compares the received upload data 5704 
with the data in the merchant information server 903, 
and generates data for updating the gate terminal. At ss 
this time, the service server 900 also compares irrfor- 
matk)n for the electronic tk^ket that is being examined by 
the gate terminal with the management informatk)n that 


is stored in the service director information server 901 
for the registered electronic ticket, and examines the 
electronic ticket to determine whether it is valid. Then, 
the service server 900 transmits, to the gate terminal, 
an Lfxjate data message 5705 that includes the data for 
updating the gate terminal. The update data for the gate 
terminal includes as information ticket reference results 
that indicate what results were obtained when the elec- 
tronic ticket was exanvned to determine whether it was 
valid. 

[0576] The gate terminal develops tiie update data 
that is included in the received update data message 
5705, and updates the internal data. At this time, the 
tktet reference results are also stored on the hard disk 
at of the gate terminal. In accordance with the contract 
agreed to by the merchant arxi the service providing 
system, the ticket reference results may be transmitted 
to the mercfiant by electronic mail or by regular mail, 
instead of being included in tiie update data for the gate 
terminal. 

[0577] If the firm represented by the merchant differs 
from tiiat represented by the ticket issuer, and a pay- 
ment for the merchant who handles the ticket is made 
t)y the ticket issuer, or if the usage of the tk:ket is period- 
ically reported to ttie ticket issuer in accordance wttii the 
terms of a contract in accordance with the results that 
are obtained by tiie ticket reference process, the service 
provkJing system, for example, weekly generates a 
usage condition notification 7100, whk:h is a message 
notifying the ticket issuer of tiie ticket usage condition, 
and transmits it to tiie ticket issuing system 107. 
[0578] In Fig. 74 is shown the ticket transfer process- 
ing. 

[0579] In Fig. 74 is shown a case where user A trans- 
fers an electronic ticket to user B. The basic processing 
is the same whether infrared communication or digital 
wireless communication is employed by the users A and 
B. 

[0580] First, an explanation will be given when infrared 
communication is employed between the users A and B. 
[0581] The ticket transfer process is initiated when tiie 
users A and B orally agree to the transfer of an elec- 
tronic ticket. 

[0582] First, user A sets the mobile user terminal to 
the ticket mode, and employs the function switch (F1 or 
F2) to display on the LCD a ticket that is to be trans- 
ferred. User A depresses the function switch (F3) to dis- 
play the operating menu for tiie electronic ticket, and 
selects "ticket transfer." Thereafter, tiie user A 
depresses the execution switch while directing the infra- 
red communk^ation port toward the infrared communi- 
cation pat of the mobile user terminal of user B (ticket 
transfer operation 7400), Then, via infrared communica- 
tion, the mobile user terminal belon^ng to user A trans- 
mits, to the mobile user terminal belonging to user B. a 
ticket transfer offer 7401 , which is a message offering to 
transfer an electronic tick^. 

[0583] Upon receiving the ticket transfer offer 7401 , 
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the mobile-user terminal belongirtg to user B examines 
the contents of the ticket transfer offer 7401, and dis- 
plays on the LCD the contents of the electronic ticket 
that is to be transferred (display transfer offer: 7402). 
[0584] User B confirms the contents displayed on the s 
LCD, and depresses the execution witch, while direct- 
ing the infrared communication port toward the infrared 
communication port of the mobile user terminal belong- 
ing to user A (transfer offer acceptance operatkxi 7403). 
Then, via infrared communrcation, the mobile user ter- io 
minal belonging to user B transmits, to the mobile user 
tennnat belonging to user A, a ticket transfer offer 
response 7404. which is a message transmitted in 
response to the ticket transfer offer 7401 . 
[0585] The nxibile user terminal of user A displays on is 
the LCD the contents of the ticket transfer offer 
response 7404 (display the transfer offer response: 
7405) that has been received. In additk)n, via infrared 
communication, the mobile user terminal of user A 
transmits to the mobile user terminal of user B a ticket 20 
transfer certificate 7406, whk:h is a message corre- 
sponding to a certificate for the transfer of the electronic 
ticket to user B. 

[0586] The mobile user terminal of user B examines 
the ticket transfer certificate 7406 tiiat fias been ss 
received, and via infrared communication ti-ansmits a 
ticket receipt 7407. which is a message stating that the 
electronic ticket has been transfen-ed. to the mobile user 
terminal of user A. 

[0587] Upon receiving the ticket receipt 7407. the 30 
mobile user terminal of user A displays on tiie LCD a 
transfer oonpletion message (display transfer comple- 
tion: 7408). The processing for the rrobile user terminal 
of user A (sender) is thereafter terminated. 
[0588] After transmrtting tiie ticket receipt 7407, tiie 3S 
mobile user terminal of user B displays on the LCD the 
ticket transfer certificate 7406 tiiat has been received. 
The mobile user terminal also displays a dialogue mes- 
sage to ask the user whether the transfer process with 
the servk^e server (the process for downloading a trans- 40 
ferred electronic ticket from the sennce providing sys- 
tem) should be performed immediately (display tiie 
ti'ansfer certificate: 7409). 

[0589] The dialogue message includes two operating 
menus: "transfer request*' and "cancel." When "cancel" 45 
is selected, the current transfer process being per- 
formed with the service providing system is canceled. 
During tiie process (data updating process) wherein the 
sen/ice providing system updates the data in the mobile 
user terminal of user B, the electronic ticket that has so 
been transferred is set up as a part the update data 
for the nrx)bile user terminal of user B. 
[0590] When user B selects *1ransfer requesr (trans- 
i& request operation 7410), the mobile user terminal 
employs the ticket transfer certificate 7406 to generate a ss 
ticket transfer request 7411. which is a message 
requesting the transfer process be perfomied witii tiie 
service provkJing system, and transmits the request 


741 1 to tiie service providing system via digital wireless 
telephone communication. 

[9591] The service providing system examines the 
contents of the ticket transfer request 741 1 that has 
been received, and via digital wireless telephone com- 
munication, transmits to the mobile user terminal of user 
B a ticket transfer message 741 2 tiiat includes the elec- 
t-onic ticket tfiat was f ansfened by user A. 
[0592] Upon receiving tiie ticket tansfer message 
7412, the mobile user terminal of user B displays the 
electronic ticket on the LCD (display tiie electronic 
ticket: 7413). The ticket transfer processing is thereafter 
terminated. 

[0593] Next an explanation will be given for digital 
wireless telephone communication between users A 
and B. 

[0594] For this type of communication, the ticket trans- 
fer process is also initiated wfien users A and B orally 
agree on the transfer of an electronic ticket. At this time, 
users A euid B are using digital wireless telephones to 
communicate with each other. 
[0595] First, user A sets the mobile user terminal to 
tiie ticket mode and employs the function switch (F1 or 
F2) to display on the LCD a ticket to be transferred. User 
A then depresses the function switch (F3) to display the 
operating menu for tie electronic ticket. The user 
selects "ticket tansfer" and depresses tiie execution 
switch (ticket transfer operatbn 7400). Then, via digital 
wireless telephone communication, the mobile user ter- 
minal of user A transmits, to the mobile user terminal of 
user B, a ticket transfer offer 7401 . whk:h is a message 
offering to transfer an electronic ticket. 
[0596] Upon receiving the ticket fransfer offer 7401 . 
tiie mobile user terminal of user B examines the con- 
tents of the ticket transfer offer 7401, and displays on 
tiie LCD the contents of the electronic ticket that is to be 
fransfenred (display transfer offer: 7402). 
[0597] The user B confirms the contents displayed on 
tiie LCD, and depresses the execution switch (transfer 
offer acceptance operation 7403). Then, through digital 
wireless telephone communication, the mobile user ter- 
minal of user B transmits, to tiie mobile user terminal of 
user A. a ticket transfer offer response 7404. which is a 
response message for tiie ticket transfer offer 7401 . 
[0598] The motDile user terminal of user A displays on 
tiie LCD the contents of tiie received tkiket transfer offer 
response 7404 (display the transfer offer response: 
7405). Thereafter, via digital wireless telephone com- 
munication, the wcbWe user terminal transmits to tiie 
mobile user terminal of user B a ticket transfer certifi- 
cate 7406, whk:h is a message conesponding to a cer- 
tificate for tiie tansfer of the electronic ticket to user B. 
[0599] The motile user terminal of user B examines 
tiie received ticket transfer certifkate 7406 and via dig- 
ital wireless telephone communication transmits a ticket 
receipt 7407, which is a message stating that tiie elec- 
tronic ticket has been transferred to user B, to tiie 
mobile user terminal of user A. 
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[0600] Upon receiving the ticket receipt 7407, the 
mobile user terminal of user A displays a transfer conv 
plettcn message on the LCD (display trartsfer comple- 
tion: 7408). The processing for the mobile user terminal 
of user A (sender) is thereafter terminated. s 
[0601] After transmitting the ticket receipt 7407, the 
nfK)bile user terminal of user B displays on the LCD the 
received ticket transfer certificate 7406. Also, the mobile 
user terminal dsplays a dialogue message asking the 
user whether the transfer process with the service io 
server (the process for downloading a transferred elec- 
tronic ticket from the service providing system) should 
be performed immediately (display the transfer certifi- 
cate: 7409). 

[0602] Included in the dialogue message are two 75 
operating menus: transfer request" and "cartel.' When 
"cancer is selected, the current transfer process that is 
being conducted with the service provKling system is 
canceled. During the process (data updating process) 
whereby the service provkiing system updates the data 20 
in the mobile user terminal of user B. the electronic 
tktot that has been transferred is set in the mobile user 
terminal of user B as a part of the ifxiate data. 
[0603] When the user B selects Iransfer request" 
(transfer request operation 7410), the mobile user ter- 25 
minal disconnects the oommunicatbn line leading from 
user A and connects the digital wiretess telephone conv 
municatwn line with the service provWing system. Then, 
the mobile user temrinal enploys the tk:ket transfer cer- 
tif k»t6 7406 to generate a ticket transfer request 741 1 , 30 
which is a message requesting the transfer process be 
performed with the service providing system, and trans- 
mits the request 741 1 to the service providing system 
via digital wireless telephone communication. 
[0604] The service provkJing system examines the 35 
contents of the received tkicet transfer request 7411, 
and via digital wireless telephone communicalion, 
transmits to the mobile user terminal of user B a ticket 
transfer message 7412 that includes the electronic 
tkkeX that is being transferred by user A. 4C 
[0605] Upon receiving the ticket transfer message 
7412, the mobile user terminal of user B displays the 
electronic tki<et on the LCD (display the electronic 
trcket: 7413). The ticket transfer processing is thereafter 
terminated. 45 
[0606] In Fig. 77 is shown the electronic ticket instal- 
lation processing. 

[0607] Rrst the user sets the mobile user terminal to 
the ticket mode and employs the function switch (F4) to 
display the operating menu for the ticket mode. The user so 
then selects "instair and displays the installatksn screen 
on the LCD. Thereafter, the user employs the number 
key switches to enter the installatbn card number and 
the installation number that are printed on the electronic 
tktot Installation card, and depresses the execution ss 
amtch 311 Cnstallation operation 7700). The mobile 
user terminal then transmits to the service providing 
system 110 an installation request 7701, which is a 


message requesting the installation of an electronic 
trcket. 

[0608] The service providing system 1 1 0 specifies an 
installation card issuer by refening to the installatk)n 
card number that is included in the received electronic 
ticket installation request 7701, and transmits to the 
trcket issuing system of that issuer a ticket installatk)n 
request 7702, which is a message requesting that a 
tk:ket be issued. 

[0609] In the ticket issuing system, the ticket issuing 
server 1 100 compares the installation card number and 
the installation number, which are included in the ticket 
installatnn request 7702 that has been received, with 
the management information that is stored in the ticket 
issuing infomr»tk>n server 1 102 for the electronic ticket 
installatk^n cards that have been issued. In additk>n, the 
ticket issuing server 1100 updates the data in the cus- 
tomer information server 1 101 , in the ticket issuing infor- 
mation server 1 102. and in the ticket infomiation server 
1 103. The ticket issuing server 1 100 then generates tiie 
data for the requested ticket, and transmits to the serv- 
ice providing system an electronk; ticket installation 
oommissk)n 7703, which is a message requesting the 
installatk)n of an electronic ticket that corresponds to 
the ticket that has been requested. 
[0610] Upon receiving the electronic ticket installatran 
oommis8k)n 7703, the service providing system gener- 
ates an electronic ticket, and to install the electronic 
ticket in the mdbWe user terminal, transmits to the 
mobile user terminal an electronk; ticket installation 
message 7704. 

[061 1 1 The mobile user terminal installs the electronic 
ticket that is included in the received electronic ticket 
installatkin message 7704, and displays on the LCD the 
installed electi-onic ticket (display tiie electronk: iKkeX: 
7705). 

[0612] The ticket modification processing will now be 
described. 

[0613] In the tk;ket modification process, tiie ticket 
issuer changes the contents of a ticket that has been 
issued, in accordance with that change, a program 
employed by the gate terminal for the examination of 
electronic tickets (ticket examination program) may be 
updated or an electronic ticket stored in the mobile user 
terminal may be changed, or both the program and the 
ticket may be changed. 

[0614] First, an explanation will be given for a case 
wherein the ticket examination program of the gate ter- 
minal is updated. 

[0615] In Rg. 80 is shown tiie ticket modificatton 
processing for the gate terminal. Rrst the ticket issuing 
system transmits to the service provicGng system a 
modification request 8000. which is a message request- 
ing that the contents of a ticket that was issued be 
changed. 

[0616] Upon receiving tiie modification request 8000, 
the service provkJing system performs the ticket nxxJifi- 
cation processing for the gate terminal when tiie ticket 
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exarnnation program that is stored in the gate terminal 
has to be changed. 

[061 7] The ticket modification processing for the gate 
terminal is not performed in accordance with a special 
operating sequence, but by using a forcible data updat- s. 
ing process during which the data held by the gate ter- 
minal is forcibly updated by the service providing 
system. 

[0618] For the forcible data updating process, first the 
service providing system transmits to the gate terminal io 
a data update instruction 5706, which is a message 
instructing the updating of the data. 
[0619] The data update instruction 5706 includes 
information descrbtng the range of the data to be 
uploaded (update option code 8843: Rg. 88F). Upon is 
receiving the data update instruction 5706. the gate ter- 
minal generates and transmits to the service providing 
system upload data 5707. which is a message In which 
is included data that is to be uploaded to the service 
providing system. 20 
[0620] In the service providir>g system, the service 
server 900 compares the upload data 5707 that is 
received with the data in the merchant infornfiation 
sender 903, and generates data for updating the gate 
temiinat. At this time, the ticket examination program 25 
that has been changed is installed as data for the updat- 
ing of the gate terminal. The service server 900 gener- 
ates and transmits to the gate temninal an update data 
message 5708 that includes the data for updating the 
gate terminal. 30 
[0621] The gate terminal develops the update data 
that is irxduded in the update data message 5708 that 
has been received and updates the internal data. At this 
time, the ticket examination program is also updated. 
[0622] An explanatk)n will now be given for a case in 35 
which an electronic ticket held by the mobile user termi- 
nal is changed, tn Fig. 81 is shown the ticket modifica- 
tion processing for the mobile user terminal. First, the 
ticket issuing system transmits to the service providing 
system a modification request 8100, which is a mes- 40 
sage requesting the changing of the contents of a ticket 
that has been issued. Upon receiving the nxxJrfication 
request 8100, the service providing system performs 
the ticket modification process for the mobile user termi- 
nal of a user who owns an electronic ticket that must be 45 
altered. Using the modification request 8100, the serv- 
ice providing system generates, and transmits to the 
mobile user terminal, a modification notification 8101. 
which is a message employed to notify the user that the 
contents of the elearonic ticket have been changed. so 
[0623] Upon receiving the modification notifk:ation 
8101 , the mobile user terminal outputs an audible signal 
to alert the user, and displays on the LCD a message 
featuring the altered corrtents of the electronic tkiiet and 
a message permitting the user to perform a comple- 55 
mentary operation (display nrxxJification notification: 
8102). When the date is changed, for example, a mes- 
sage descrft)ing the date change arxl a message per- 


mitting the user to select a complementary operation for 
the modification, "accept." "refuse" or "refund." are dis- 
played. 

[0624] Based on the messages displayed on the LCD. 
the user selects a complementary operation using the 
numk>er key switches (reaction selection operation 
8103). Then, the mobile user terminal generates a reac- 
tion selection message 8104. which conveys the reac- 
tion of the user to the modrf icatk)n notification 81 01 , and 
transmits it to the service providing system. When the 
user selects "refuse" or "refund," tiie mobile user termi- 
nal changes the state of the electronic ticket to the disa- 
bled state. 

[0625] Wh^ the reaction selection message 81 04 is 
received, and when "accept" is selected as the user's 
reaction to the modification notification 8101. the serv- 
\CB provicfing system transmits to the mobile user temni- 
nal a modification instruction 8105. whk:h is a message 
in which is included a new electaronic ticket. When 
"refund" is selected, the servrce provkiing system initi- 
ates the ticket refund processing. When "refuse" is 
selected, the service provkjing system ^langes. to tiie 
disabled state, the state of the electronk; ticket belong- 
ing to the pertinent user tfiat is staed in the user infor- 
mation server 902. and tern^nates the ticket 
modificatk)n processing. 

[0626] Upon receiving the oKxIifkation instruction 
8105, the mobile user terminal updates the electronk; 
ticket that must be changed to an electronk: ticket that is 
included in tiie modification instructton 8105, and dis- 
plays tiie updated electronic ticket on the LCD (ticket 
display 8106). 

[0627] The ticket refund processing is shown in Rg. 

82. 

[0628] In the ticket refund processing, the procedures 
in the tk:ket nnodification processing (Fig. 81) are also 
performed until the mobile user terminal transmits a 
reaction selection message 8204 (8104) to the sen^k^e 
providing system. 

[0629] Upon receiving the reaction selectbn message 
8204. tiie service providing system notes that the user's 
reaction to the modification notification 8101 is "refund," 
and transmits to the ticket issuing system a refund 
request 6205, which is a message requesting that tiie 
ticket issuer refund the amount charged for the ticket. 
[0630] Upon the refund request 8205 being received 
by the ticket issuing system, tiie ticket issuing server 
1100 updates the data in tiie customer information 
server 1101. the ticket issuing information server 1102 
and the ticket information server 1 103. and cancels tiie 
tick^ fliat was issued. Then, the tk:ket issuing server 
1 100 generates a refund commission 8206, which is a 
message requesting that the servk;e provkling system 
refund the amount charged for the electronic ticket, arxl 
transmits tiie refund commission 8206 to the servk;e 
provkling system. Upon receiving the refund commis- 
sion 8206. tiie service providing system transmits to the 
ti-ansaction processing system 106 a refund clearing 
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request 8207. which is a message requesting that the 
ticket refund clearing process be pertormed. 
[0631] Upon the refund clearing request 8207 being 
received at the transaction processing system, the 
transaction server 1000 updates the data in the sub- s 
scriber information server 1001 , the member store infor- 
mation server 1002 and the transaction irrfornBtion 
server 1 103. and performs the refund clearing process. 
The transaction server 1000 then transmits to the serv- 
ice providing system a refund clearing completion notif i- io 
cation 8208. which is a message stating that the refund 
clearing process has been completed. 
[0632] In accordance with the received refund clearing 
completion notification 8208, the service provicfing sys- 
tem generates a refund clearing completion notification is 
8209. which is a message stating that the refund clear- 
ing process has been completed, and transmits it to the 
ticket issuing system. Upon receiving the refund clear- 
ing completion notification 8209. the ticket issuing sys- 
tem generates and transmits to the service providing 20 
system a refund receipt 8210 that con^esponds to a 
receipt for the refund of the anrK>unt charged for the 
ticket 

[0633] The service providing system employs the 
refund receipt 8210 to generate a refund receipt 821 1 . 25 
which is a recefst message for a user, and transmits it to 
the mot>ile user terminal. 

[0634] The mobile user terminal displays on the LCD 
303 the received refund receipt 821 1 (display the refund 
receipt: 8212). The ticket refund processing is thereafter 30 
terminated. 

[0635] A detailed explanation will be given later for the 
contents of the messages that are exchanged by the 
devices during the above electronic ticket service 
processing. as 
[0636] The electronic payment card service will now 
be described. 

[0637] The electronic payment card service mainly 
includes seven types of processes: an electronic pay- 
ment card purchase process, an electronic payment 40 
card registration process, an electronic payment card 
setup process, an electronic payment card settlement 
process, an electronic payment card reference process, 
an electronic payment card transfer process, and an 
electronic payment card installation process. 4s 
[0638] TTte payment card purchase process is a proc- 
ess whereby the user purchases an electronic payment 
card from a payment card issuer. The payment card reg- 
istration process is a process whereby, in the service 
providing system, the user registers for his or her own so 
use a purchased payment card or one received as a gift. 
The payment card setup process is a process whereby 
the service provider determines the process to be 
employed for the electronic payment card at the mer- 
chant terminal 102 or 103 or at the automatic vending ss 
machine in accordance with a contract entered into with 
a merchant The payment card settlement process is a 
process whereby the user employs the electronic pay- 


ment card for a settlement process with the merchant 
terminal 102 or 103, or the automatic vending machine 
104. The payment card reference process is a process 
whereby the merchant terminal 102 or 103 or the auto- 
matic vending machine 104 asks the service providing 
system whether the electronic payment card that is 
errployed is valid. The paymeit card transfer process is 
a process for transferring an electronic payment card. 
And the electronic payment card installation process is 
a process for installing an electronic payment card in the 
mobile user terminal 100 using an electronic payment 
card installation card. 

[0639] In Fig. 61 is shown the payment card purchase 
processing. 

[0640] First the user sets the vndbWe user terminal 
100 to the payment card mode, and uses the furxition 
switch (F4) to display the operating menu for the pay- 
ment card mode. Thereafter, the user selects "payment 
card purchase.*" and the payment card order screen is 
displayed on the LCD. Then, by using the function 
switch 307 and the number key switches 308. the user 
selects a payment card issuer, enters the order code for 
a desired payment card and a desired number of pay- 
ment cards, designates a credit card to t>e used for pay- 
ment and the numt)er of payments, and enters the code 
number. The user then depresses the execution switch 
311 (payment card order operation 6100), and the 
mobile user terminal transmits, to the service providing 
system, a payment card order 6101, which is a mes- 
sage for applying for an electronic payment card. Upon 
receiving the payment card order 6101 , the service pro- 
viding system transmits, to the payment card issuing 
system 108, a payment card order 6102. which is a 
message used to apply for a payment card. 
[0641] Upon the payment card order 6102 being 
received at the payment card issuing system, the pay- 
ment card issuing server 1200 updates the data in the 
customer information server 1201. the payment card 
issuing information server 1202 and the payment card 
infonnation server 1203. The payment card issuing 
server 1200 generates payment card data for the 
ordered payment card, and transmits, to the service 
providing system, an electronic payment card issuing 
commission 6103. which is a message requesting that a 
oonesponding electronic payment card be issued and 
that the settlement process be performed for the price of 
the payment card. 

[0642] Upon receiving the electronic payment card 
issuing commission 6103. the service providing system 
transmits, to the transaction processing system 106, a 
clearing request 6104. which is a message requesting 
that the price of the payment card be cleared. 
[0643] Upon the clearing request 6104 being received 
at the transaction processing system, the transaction 
server 1000 updates data in the subscriber information 
sender 1001. in the member store informatfon server 
1002 and in the transaction information server 1003. 
performs the clearing of the credit card, and transmits to 
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the service providing system a clearing conrtpleticxi noti- 
fication 6105. which is a message stating that the clear- 
ing process has been completed. 
[0644] Upon receiving the clearing completion notifi- 
cation 6105, the service providing system generates a s 
clearing completion notification 6106. which is a mes- 
sage stating that the clearing process has been com- 
pleted, and transmits it to the payment card issuing 
system. In addition, the service providing system gener- 
ates an electronic payment card to be issued to the io 
user. 

[0645] Upon receiving the clearing corrpletion notifi- 
cation 6106. the payment card issuing system gener- 
ates, and transmits to the service providing system, a 
receipt 6107, which is a message corresponding to the 75 
receipt for the sale of the payment card. 
[0646] Based on the received receipt 6107, the serv- 
ice providing system generates a receipt 6109. which is 
a receipt message for the user, and transmits it to the 
mobile user terminal, together with an electronic pay- 20 
ment issuance message 6108 that includes the elec- 
tronic payment card that has been generated. 
[0647] Upon receiving the electronic payment card 
issuance message 6108 and the recept 6109. the 
mobile user terminal displays the purchased electronic 2S 
payment card on the LCD (display the electronic pay- 
ment card: 6110). At this time, a dialogue message is 
also displayed on the LCD for registering the electronic 
payment card that has been purchased. Then, when the 
user selects "register." the mobile user terminal initiates 3o 
the payment card registration process. 
[0648] The payment card registration processing is 
shown in Fig. 65B. 

[0649] The payment card registration process is 
begun when the dialogue message for registering an 3S 
electronic payment card for use is displayed on the LCD. 
To display the dialogue message for the use registra- 
tion, the execution witch 31 1 is depressed immediately 
after the electronic payment card is purchased, or while 
an electronic payment card tfiat has not yet been regis- 4o 
tered is displayed ("unregistered" is displayed as the 
state of the payment card). 

[0650] The dialogue message for registration has two 
operating menus: "register" and **cancel." When the 
user selects **cancel," the payment card registration 4S 
process is canceled. When the user selects "register" 
(registration operation of an electronic payment card: 
6504), the wcbWe user terminal transmits, to the service 
providing system, a payment card registration request 
6505, which is a message requesting the registration of so 
an electronic payment card. In the sen/ice providing 
system, the service server 900 compares the contents 
of the received payment card registration request 6505 
with the user information in the user information server 
902. The service server 900 updates the management ss 
information that is stored in the service director informa- 
tion server 901 for an electronic payment card that has 
been registered. The service server 900 registers the 


electronic payment card, and transmits, to the mobile 
user tenminal, a payment card certificate issuance mes- 
sage 6506. which includes a certificate for the regis- 
tered electronic payment card. 
[0651] Upon receiving the payment card certificate 
6506. the mobile user terminal displays the registered 
electronic payment card on the LCD ("registered" is dis- 
played as the state of the payment card) (display a reg- 
istered payment card: 6507). 
[0652] The payment card setup processing will now be 
described. 

[0653] The payment card setup process is a process 
for. in accordance with a contract entered into by the 
service provider and the merchant, setting and updating 
an electronic payment card that is to be processed by 
the merchant terminal 102 or 103 or the automatic 
vending machine 104. 

[0654] The payment card setip process is not per- 
formed according to a special processing sequence, txjt 
is performed during the data updating processing (Rg. 
57B) when the service providing system updates the 
data in the merchant terminal 102 or 103 and the auto- 
matic vending machine 104. 

[0655] When a time that has been set in advance is 
reached, the merchant terminal 102 or 103. or the auto- 
mate vending macNne 104 automatically initiates the 
data updating process, and transmits, to the sen/ice 
providing system, a data update request 5702. which is 
a nr)e8sage requesting the peribrmance of the data 
updating process. 

[0656] The service providing system transmits, to the 
merchant terminal 102 or 103 or tfie automatic vending 
machine 104, a data update response 5703, which is a 
message dispatched in response to the receipt of the 
data update request 5702. 

[0657] Upon receiving the data update response 
5703, the merchant terminal 102 or 103 or the auto- 
matic vending machine 104 generates and transmits, to 
the service providing system, upload data 5704, which 
is a message in which is included data to be uploaded 
to the service providing system. 
[0658] The sen/ice providing system compares the 
received upload data 5704 with the data in the merchant 
information server 903 and generates update data. At 
this time, an electronic payment card that is to be proc- 
essed is updated, and information for the update is 
included in the update data. 

[0659] Then, the service providing system transmits, 
to the merchant terminal 102 or 103 or the automatic 
vending machine 104. an update data message 5705 
that includes the update data that has been generated. 
The merchant terminal 102 or 103 or the automatic 
vending machine 104 develops the update data that is 
included in the received update data message 5705. 
and updates the internal data. At this time, the elec- 
tronic payment card that is pnxessed by the merchant 
102 or 103 or the automatic vending machine 104 is 
also updated. 
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[0660] In Fig. 68 is shown the payment card settle- 
ment processing performed by the mobile user terminal 
100 and the merchant terminal 102 or 103. 
[0661] First, the user notifies the merchant that an 
electronic payment card will be employed for the pay- s 
ment (instruct settlemerrt to be nrvade with an electronic 
payment card: 6800). 

[0662] The merchant thereafter depresses the pay- 
ment card settlement switch 512 (the function switch F2 
for the merchant terminal 102) (depress the payment io 
card settlement switch: 6801). and permits the user to 
start the payment operation (instruct the start of the 
payment operation: 6803). At this time, the total charge 
and a message indicating that the merchant terminal is 
waiting for the user to initiate the payment operation are is 
displayed on the LCD of the merchant terminal 102 or 
103 (display "waiting for payment operation': 6802). 
[0663] The user sets the mobile user terminal to the 
payment card nxxle. employs the function switch (F1 or 
F2) to display a payment card to be used for the pay- 20 
ment, and enters the payment amount using the 
number key switches. Then, while directing the infrared 
communication port 300 toward the infrared communi- 
cation module of the merchant terminal (the infrared 
conrninication port for the merchant terminal 1 03), the 2s 
user depresses the execution switch 311, (payment 
operation 6804). The amount entered by the user may 
be equal to or greater than the charge. 
[0664] The mobile user terminal generates a paymerrt 
offer 6805 ttiat includes the payment amount entered by 30 
the user and information regarding the electronic pay- 
ment card designated t}y the user, and that is a mes- 
sage off^ing to pay the merchant an amomt equal to 
the price. The payment offer 6805 is transmitted to the 
merchant terminal via infrared communication. 3S 
[0665] Upon receiving the payment offer 6805, the 
merchant terminal examines the type of payment card, 
the payment amount and the remaining anx)unt. and via 
infrared communication, transmits to the mobile user 
terminal a paynient offer response 6806. which \s a 40 
response message for the payment offer 6805. The pay- 
ment offer response 6806 includes infonrotion regard- 
ing the amount charged. 

[0666] Upon receiving the payment offer response 

6806. the mobile user terminal confirms that the amount 4S 
charged is equal to or lower than the payment amount 
entered by the user. The user subtracts the amount 
charged from the total remaining amount held by the 
electronic payment card, and generates a micro-check 

6807. which is a message corresponding to a check on so 
which the amount charged is given as the face value. 
The miao-check 6807 is transmitted to the merchant 
terminal via infrared communication. 

[0667] The merchant temrinal examines the contents 
of the received micro-check 6807 and gen&ates a ss 
receipt 6808, which is a message corresponding to a 
message for the micro-check 6807 that has been paid. 
The merchant terminal transmits the receipt 6808 to the 


nrK)bile user terminal via infrared communication, and 
displays, on the LCD, a message Indicating that the pay- 
ment card clearing process has been conpleted (dis- 
play clearing completion: 6810). 

[0668] A product is thereafter delivered by the mer- 
chant to the user (delivery of a product: 681 1). 
[0669] In Fig. 69 is shown the payment settlement 
processing performed by the mobile user terminal 100 
and the automatic vending machine 104. 
[0670] First, the user selects "purchase" from the 
operating menu that is displayed on the touch panel 
LCD of the automatic vending machine (purchase start 
operation 6900). The automatic vending machine then 
displays, on the touch panel LCD. a message permitting 
the user to select a product (display ''waiting for product 
selection operation": 6901). 

[0671 ] When the user depresses the product selection 
switches 704 fa desired products (product selectx}n 
operation 6902), the automatic vending machine counts 
the number of selected products, cateulates the total 
charge, and displays, on the touch panel LCD, the 
names, the volumes and the total amount charged for 
the selected products, and a button for starting the pay- 
ment operation (display "waiting for the payment start 
operation": 6903). Furthermore, when the user 
depresses the selectbn switch 704 for other desired 
products (product selection operation 6902), similarly, 
the automatic verxling machine counts the number of 
selected products, calculates the total charge, and dis- 
plays, on the touch panel LCD, the names, the volumes 
and the total amount charged for the selected products, 
and the txitton for starting the payment operatkin (dis- 
play "waiting for the payment start operation": 6903). 
[0672] When the user presses the payment operation 
start button (payment start operatksn 6904). the auto- 
matic vending machine displays, on the LCD. a mes- 
sage permitting the user to start the payment operation 
using the electronic payment card (display "waiting for 
the payment operation": 6905). 
[0673] The user sets the mobile user tenninal to the 
payment card nrxxie. employs the function switch (F1 or 
F2) to display a payment card to be used for the pay- 
ment and enters the amount of the payment using the 
number key switches (the amount to be paid entered by 
the user may be equal to or greater than the total value 
of the products). Then, while directing the infrared com- 
munication port 300 toward the infrared communication 
port of the automatic vending machine (payment opera- 
tion 6906), the user depresses the execution switch 
311. The mobile user terminal generates a payment 
offer 6907 that includes the amount of the payment 
entered by the user and the information for the elec- 
tronic payment card (card type or the remaining total 
amount) and that is a message to the automatic vending 
machine (merchant) offering to pay the amount repre- 
sented by the price. The payment offer 6907 is then 
transmitted to the automatic vending machine via infra- 
red communication. 
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[0674] Upon receiving the payment offer 6907, the 
automatic vending machine examines the type of pay- 
ment card and the remaining amount, and via Infrared 
communication, transmits to the mobile user terminal a 
paymerrt offer response 6908, which is a response mes- 5 
sage for the payment offer 6907. The payment offer 
response 6908 includes information e)^ressing the 
amount charged (the total value of the products). 
[0675] .Upon receiving the payment offer response 

6908. the mobile user terminal confirms that the charge 10 
amoum is equal to or lower than the amount of the pay- 
ment entered by the user. The user subtracts the charge 
amount from the total remaining amount held by the 
electronic payment card, and generates a micro-check 

6909, which is a message corresponding to a check on 15 
which the amount charged is given as the face value. 
The micro-check 6909 is thereafter transmitted to the 
automatic verxiing machine via infrared communication. 
The automatic vending machine examines the contents 

of the recaved miao-check 6909, and generates a 20 
receipt 6910. which is a message coresponding to the 
message for the miao-check 6909 that has been paid. 
The automatic vending machine transnvts the receipt 
6910 to the mobile user terminal via infrared communi- 
cation and discharges products through the discharge 25 
port 703. 

[0676] The mobile user terminal displays the contents 
of the receipt 6910 on the LCD (display the receipt: 
6911), and thereafter, the payment card settlement 
processing at the mobile user terminal is temninated. 30 
[0677] The payment card reference processing is 
shown in Fig. 72. 

[0678] The payment card reference process is not per- 
formed in accordance with a special processing 
sequence, but is performed during the data updating 35 
processing, when the service providing system updates 
the data in the merchant terminal 102 or 103 or in the 
automata vending machine 104. 
[0679] When a time that has been set in advance is 
reached, the merchant terntinal 102 or 103 or the auto- 40 
matic vending machine 104 automatically initiates the 
data updating process, and transmits, to the service 
providing system, a data update request 5702, which is 
a message requesting that the data updating process 
be performed. 4s 
[0680] The service providing system thereafter trans- 
mits, to the merchant terminal 102 or 103 or the auto- 
matic vending machine 104, a data update response 
5703, which is a message transmitted as a reply to the 
data update request 5702 that was received. so 
[0681] The data update response 5703 includes infor- 
mation indicating the range of the data that is to be 
uploaded (update option code 8809: Fig. 88B). Upon 
receiving the data update response 5703. the merchant 
terminal 102 or 103 or the automatic vending machine ss 
104 generates and transmits, to the service providing 
system, i^load data 5704. which is a message in whk:h 
is included the data that is to be uploaded to the service 


providing system. At this time, the uptoad data 5704 
includes information for a new micro-check that is proc- 
essed during the paymem cand clearing process. 
[0682] In the service providing system, the service 
server 900 compares the received upload data 5704 
with the data in the merchant information server 903. 
and generates update data. At this time, the sen^ice 
server 900 also compares information for the micro- 
check with the management infonnation that is stored in 
the service director information server 901 for the regis- 
tered electronic payment card, and examines the micro- 
check to determine whether it is valid. Then, the service 
server 900 transntits. to the merchant terminal 102 or 

103 or the automatic verxjing machine 104, an update 
data message 5705 that includes the data for updating 
the merchant terminal 102 or 103 or the automatic 
vending machine 104. The update data for the merchant 
temninal 102 or 103 or the automatic vending machine 

104 includes as information payment card reference 
results that indicate what results were obtained when 
the n^cro-check was examined to determine whether it 
was vEilid. 

[0683] The merchant terminal 1 02 or 1 03 or the auto- 
matic vending machine 104 develops the update data 
that is included in the received update data message 
5705, and updates the internal data. At this time, tiie 
payment card reference resudts are also stored as inter- 
nal data for the mercham terminal 102 or 103. For the 
automatic vending machine 104. the payment card ref- 
erence results are transmitted to a merchant by elec- 
tronic mail or by regular mail. 

[0684] Also for the merchant terminal 102 or 103, in 
accordance with the contiBct agreed to by the merchant 
and the service providing system, the payment card ref- 
erence results may be transmitted to the merchant by 
electronic mail or by regular mail, instead of being 
included in the update data for tiie merchant terminal. 
[0685] If the firm represented by the merchant differs 
from that represented by the payment card issuer, and a 
payment for tiie merchant who handles the micro-check 
is made by the payment card issuer, or if the usage of 
the payment card is periodically reported to the pay- 
ment card issuer in accordance with the terms of a con- 
tract, in accordance with the results tiiat are obtained by 
the payment card reference process, the service provid- 
ing system, for example, weekly generates a usage 
condition notification 7200, which is a message notify- 
ing the payment card issuer of the payment card usage 
condition, and transmits it to tiie payment card issuing 
system 108. 

[0686] tn Fig. 75 is shewn tiie payment card transfer 
processing. 

[0687] In Fig. 75 is shewn a case where user A trans- 
fers an electronic payment card to user B. The basic 
processing is the same whetfier infrared communication 
or digital wireless communication is enpfoyed by the 
users A and B. 

[P688] First, an explanation will be given when infrared 
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communication is ennployed between the users A and B. 
[0689] The payment card transfer process is initiated 
when the users A and B aally agree to the transfer of an 
electronic payment card. 

[0690] Rrst, user A sets the mobile user terminal to 
the payment card mode, and employs the function 
switch {F1 or F2) to display on the LCD a payment card 
that is to be transferred. User A depresses the function 
switch (F3) to display the operating menu for the elec- 
tronic payment card, and selects "payment card trans- 
fer." Thereafter, the user A depresses the execution 
switch while directing the Infrared comnnunication port 
toward the infrared communication port of the mobile 
user terminal of user B (payment card transfer operation 
7500). Then, via infrared communication, the mobile 
user terminal belonging to user A transmits, to the 
vndbWe user terminal belonging to user B, a payment 
card transfer offer 7501 , which Is a message offering to 
b-ansfer an electronic payment card. 
[0691 ] Upon receiving the payment card transfer offer 
7501. the mobile user tennnal belonging to user B 
examines the contents of the payment card transfer 
offer 7501. and displays on the LCD the contents of the 
electronic payment card that is to be transferred (display 
transfer offer: 7502). 

[0692] User B confirms the contents displayed on the 
LCD. and depresses the execution switch, while direct- 
ing the infrared communication port toward the infrared 
communication port of the mobile user terminal belong- 
ing to user A (transfer offer acceptance operation 7503). 
Then, via infrared comnnunication. the mobile user ter- 
minal belonging to user B transmits, to tfie mobile user 
terminal belonging to user A. a payment card transfer 
offer response 7504, which is a message transn^tted in 
response to the payment card transfer offer 7501. The 
nrxibile user terminal of user A displays on the LCD the 
contents of the payment card transfer offer response 
7504 (display the transfer offer response: 7505) that has 
been received. In addition, via infrared communication, 
the mobile user terminal of user A transmits to the 
mobile user terminal of user B a payment card transfer 
certificate 7506, wf^ch is a message corresponding to a 
certificate for the transfer of the electronic payment card 
to user B. 

[0693] The mdbWe user terminal of user B examines 
the payment card transfer certificate 7506 that has been 
received, and via infrared communication transmits a 
payment card receipt 7507. which is a message stating 
that the electronic payment card has been transfen-ed, 
to the mobile user terminal of user A. 
[0694] Upon receiving the payment card receipt 7507, 
the mobile user terminal of user A displays on the LCD 
a transfer completion message (display transfer com- 
pletion: 7508). The processing for the mobile user termi- 
nal of user A (sender) is thereafter terminated. 
[0695] After transmitting the payment card receipt 
7507, the mobile user terminal of user B displays on the 
LCD the payment card transfer certificate 7506 that has 


been received. The mot>ile user terminal also displays a 
dialogue message to ask the user whether the transfer 
process with the service server (the process fa down- 
loading a transferred electronic payment card from the 

s service providing system) should be performed immedi- 
ately (display the transfer certificate: 7509). 
[0696] The dialogue message includes two operating 
menus: "transfer request" and "cancel." When "cancel" 
is selected, the current transfer process being per- 

10 formed with the service providing system is canceled. 
During the process (data updating process) wherein the 
service providing system updates the data in the mobile 
user terminal of user B. the electronic payment card that 
has been transferred is set up as a part of the update 

15 data for the nKsbile user terminal of user B. 

[0697] When user B selects >ansfer request" (trans- 
fer request operation 7510), the mobile user terminal 
employs the payment card transfer certificate 7506 to 
generate a payment card transfer request 751 1 . which 

20 is a message requesting the transfer process be per- 
formed with the service providing system, and transmits 
the reque^ 7511 to the service providing system 110 
via digital wireless tel^hone communication. 
[0698] The sen^ice providing system examines the 

2S contents of the payment card transfer request 751 1 that 
has been received, and via digital wireless telephone 
communication, transmits to the mobile user terminal of 
user B a payment card transfer message 7512 that 
includes ttie electronic payment card that was trans- 

30 forred by user A. 

[0699] Upon receiving the payment card transfer mes- 
sage 7512. the mobile user terminal of user B displays 
the electronic payment card on the LCD (display the 
electronic payment card: 7513). The payment card 

35 transfer processing is thereafter terminated. 

[0700] Next, an explanation will be given for digital 
wireless telephone communication between users A 
and B. 

[0701] For this type of comnruinicalion. the payment 

40 card transfer process is also initiated when users A and 
B orally agree on the transfer of an electronic payment 
card. At this time, users A and B are using digital wire- 
less telephones to communicate with each other. 
[0702] First, user A sets the mobile user terminal to 

45 the payment card mode and employs the function 
switch (F1 or F2) to display on the LCD a payment card 
to be transferred. User A then depresses the function 
switch (F3) to display the operating menu for the elec- 
tronic payment card. The user selects "payment card 

50 transfer" and depresses the execution switch (payment 
card transfer operation 7500). Then, via digital wireless 
telephone communication, the mobile user terminal of 
user A transmits, to the mobile user terminal of user B. 
a payment card transfer offer 7501 . which is a message 

55 offering to transfer an electronic payment card. 

[0703] Upon receiving the payment card transfer offer 
7501, the mobile user terminal of user B examines the 
contents of the payment card transfer offer 7501. and 
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displays on the LCD the contents of the electronic pay- 
ment card that is to be transferred (display transfer offer: 
7502). 

[0704] The user B confirms the contents displayed on 
the LCD, and depresses the execution switch (transfer s 
offer acceptance operation 7503). Then, through digital 
wireless telephone communication, the mobile user ter- 
minal of user B trar^nuts. to the mobile user terminal of 
user A, a payment card transfer offer response 7504, 
which is a response message for the payment card io 
transfer offer 7501. 

[0705] The mobile user terminal of user A displays on 
the LCD the contents of the received payment card 
transfer offer response 7504 (display the transfer offer 
response: 7505). Thereafter, via digital wireless tele- is 
phone communication, the mobile user terminal trans- 
mits to the mobile user terminal of user B a payment 
card transfer certificate 7506. which is a message care- 
sponding to a certificate for the transfer of the electronic 
payment card to user B. so 
[0706] The mobile user terminal of user B examines 
the received payment card transfer certificate 7506 and 
via digital wireless telephone communication transmits 
a payment card receipt 7507, which is a message stat- 
ing that the electronic payment card has been trans- 2s 
ferred to user B, to the mobile user terminal of user A. 
[0707] Upon receiving the payment card receipt 7507, 
the mobile user terminal of user A displays a transfer 
completion message on the LCD (display transfer com- 
pletion: 7508). The processing for the mobile user termi- 30 
nal of user A (sender) is thereafter temninated. 
[0708] After transmittirrg the payment card receipt 
7507, tiie mobile user tenminal of user B displays on tiie 
LCD the received payment card ti-ansfer certificate 
7506. Also, the mob'le user terminal displays a dialogue 35 
message asking the user whether the transfer process 
with the service server (the process for downloading a 
ti^nsferred electronic payment card from ttie service 
providing systm) should be performed immediately 
(display tiie transfer certificate: 7509). 4o 
[0709] Included in the dialogue message are two 
operating menus: "Iransfer request" and "cancel " When 
"cancel" is selected, the cun^ent transfer process that is 
being conducted with the service providing system is 
canceled. During tiie process (data updating process) 4s 
whereby tiie service providing system updates tiie data 
in ttie mobile user terminal of user B, the electronic pay- 
ment card that has been transferred is set in the mobile 
user terminal of user B as a part of the update data. 
[0710] When the user B selects "transfer request' so 
(transfer request operation 7510), ttie mobile user ter- 
minal disconnects the communication line leading from 
user A and connects the digital wireless telephone com- 
munication line with the service providing system. Then, 
the mobile user terminal errploys the payment card ss 
transfer certificate 7506 to generate a payment card 
tiBnsfer request 7511, which is a message requesting 
tiie transfer process be performed with tiie service pro- 


viding system, arxl transmits the request 7511 to ttie 
service providing system via digital wireless telephone 
communication. 

[0711] The service providing system examines ttie 
contents of tiie received payment card transfer request 
751 1 , and via digital wireless telephone commuiication, 
transmits to the mobile user terminal of user B a pay- 
ment card transfer message 7512 that includes tiie 
electronic payment card that is being transfen-ed by 
user A. 

[071 2] Upon receiving the payment card transfer mes- 
sage 7512, ttie mobile user terminal of user B displays 
tiie electronic payment card on the LCD (display the 
electronic payment card: 7513). The payment card 
ttansfer processing is thereafter terminated. 
[071 3] In Rg. 78 is shown the electronic payment card 
installation processing. 

[0714] First, the user sets ttie mobile user terminal to 
tiie payment card nKxJe and employs the function 
switch (F4) to display the operating n^nu for the pay- 
ment card mode. The user then selects "install" and dis* 
plays the installation screen on tiie LCD. Thereafter, the 
user employs the nunber key switches to enter tiie 
installation card nunt}er and the installation number 
ttiat are printed on tiie electronic payment card installa- 
tion card, and depresses the execution switch 311 
Onstaltation operation 7800). The mobile user terminal 
then tTEUismrts to the service providing system 110 an 
installation request 7801, which is a message request- 
ing the installation of an electi-onic payment card. 
[071 5] The service providing system 1 1 0 specifies an 
installation card issuer by refemng to the installation 
card number that is included in tiie received electronic 
payment card installation request 7801, and transmits 
to the payment card issuing system cf that issuer a pay- 
ment card installation request 7802, which is a message 
requesting that a payment card be issued. 
[0716] In the payment card issuing syst^, the pay- 
ment card issuing server 1200 compares the installation 
card number and the installation number, which are 
included in the payment card installation request 7802 
tiiat has been received, with tiie management informa- 
tion that is stored in the payment card issuing informa- 
tion sender 1202 for ttie electtonic payment card 
installation cards ttiat have been issued. In addition, tiie 
payment card issuing server 1200 updates ttie data in 
the customer information server 1201. in the payment 
card issuing information server 1202, and in the pay- 
ment card information sender 1203. The payment card 
issuing server 1200 then generates the data for ttie 
requested payment card, and transmits to the service 
providing system an electronic payment card installation 
commission 7803, which is a message requesting the 
installation of an electronic payment card that corre- 
sponds to tiie payment card tiiat has been requested. 
[0717] Upon receiving ttie electronic payment card 
installation commission 7803. the service provkling sys- 
tem generates an electtonic payment card, and to install 
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the electronic payment card in the mobile user terminal, 
transmits to the mobile user terminal an electronic pay- 
ment card installation message 7804. 
[0718] The mobile user terminal installs the electronic 
payment card that is included in the received electronic s 
payment card installation message 7804. and displays 
on the LCD the installed electronic payment card (dis- 
play the electronic payment card: 7805). 
[0719] Adetailed explanation will be given later for the 
contents of the messages that are exchanged by the w 
devices during the above electronic payment card serv- 
ice processing. 

[0720] The electronic telephone card service will rKiw 
be descrbed. 

[0721] The electronic telephone card service mainly is 
includes seven types of processes: an electronic tele- 
phone card purchase process, an electronic telephone 
card registration process, an electronic telephone card 
setup process, an electronic telephone card settlement 
process, an electronic telephone card reference proc- 20 
ess, an electronic telephone card transfer process, and 
an electronic telephone card installation process. 
[0722] The telephone card purchase process is a 
process whereby the user purchases an electronic tele- 
phone card from a telephone card issuer. The telephone 2s 
card registration process is a process whereby, in the 
service providing system, the user registers for his or 
her own use a purchased telephone card or one 
received as a gift. The telephone card setup process is 
a process whereby the service provider detennines the so 
process to t>e enrployed for the electronic telephone 
card at the electronic telephone card accounting 
machine 800 of the switching center 105 in accordance 
with a contract entered into with a communication serv- 
ice provider. The telephone card settlement process is a 35 
process whereby the user employs the electronic tele- 
phone card for communication. The telephone card ref- 
erence process is a process wherry the electronic 
telephone card accounting machine 800 asks the serv- 
ice providing system whether tiie electronic telephone 40 
card that is employed is valid. The telephone card trans- 
fer process is a process for transferring an electronic tel- 
ephone card. And the electronic telephone card 
Installation process is a process for installing an elec- 
tronic telephone card in the mobile user terminal 100 4S 
using an electronic telephone card installation card. 
[0723] In Fig. 63 is shown the telephone card pur- 
chase processing. 

[0724] First, the user sets the mobile user terminal 
100 to the telephone card mode, and uses the function so 
switch (F4) to display the operating menu for the tele- 
phone card mode. Thereafter, the user selects "tele- 
phone card purchase." and the telephone card order 
saeen is displayed on the LCD. Then, by using the 
function switch 307 and tiie numk>e' key switches 308. ss 
the user selects a telephone card issuer, enters the 
order code for a desired telephone card and a desired 
number of telephone cards, designates a credt card to 


be used for payment and the number of payments, and 
enters the code number. The user then depresses the 
execution switch 31 1 (telephone card order operation 
6300), and the mobile user terminal transmits, to the 
service providing system, a telephone card order 6301, 
which is a message for applying for an electronic tele- 
phone card. Upon receiving the telephone card order 
6301 , the service providing system transmits, to the tel- 
ephone card issuing system 109. a telephone card 
order 6302. which is a message used to apply for a tel- 
ephone card. 

[0725] Upon the telephone card order 6302 being 
received at the telephone card issuing system, the tele- 
phone card issuing server 1300 updates the data in the 
customer information server 1301, the tel^hone card 
issuing information server 1302 and the telephone card 
infomiation server 1303. The telephone card issuing 
server 1300 generates telephone card data for the 
ordered telephone card, and transmits, to the service 
providing system, an electronic telephone card issuing 
commission 6303. which is a message requesting that a 
oonresponding electronic telephone card be issued and 
that the settlement process be performed for the price of 
the telephone card. 

[0726] Upon receiving ttie electronic telephone card 
issuing commission 6303, the service providing system 
transmits, fo the transaction processing system 106. a 
clearing request 6304. wtiich is a message requesting 
that the price of the telephone card be cleared. 
[0727] Upon the clearing request 6304 being received 
at the transaction processing system, the transaction 
server 1000 updates data in the subscrit>er information 
server 1001. in the member store information server 
1002 and in the transaction information server 1003, 
performs the clearing of tiie credit card, and transmits to 
the service providing system a clearing completion noti- 
fication 6305. which is a message stating that the clear- 
ing process has been completed. 
[0728] Upon receiving the clearing completion notifi- 
cation 6305. the service providing system generates a 
clearing completion notification 6306, which is a mes- 
sage stating tiiat tiie clearing process has been com- 
pleted, and transmits it to tiie telephone card issuing 
system. In addition, tiie service providing system gener- 
ates an electronic telephone card to be issued to tiie 
user. 

[0729] Upon receiving the clearing completion notifi- 
cation 6306, the telephone card issuing system gener- 
ates, and transmits to the service providing system, a 
receipt 6307, which is a message corresponding to tiie 
receipt for the sale of the telephone card. 
[0730] Based on the received receipt 6307. the serv- 
ice providing system generates a receipt 6309, which is 
a receipt message for the user, and transmits it to the 
mobile user terminal, togetiier with an electronic tele- 
phone issuance message 6308 that includes the elec- 
tronic telephone card that has been generated. 
[0731] Upon receiving tiie electi-onlc telephone card 
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issuance message 6308 and the receipt 6309. the 
mobile user terminal displays the purchased electronic 
telephone card on the LCD (display the electronic tele- 
phone card: 6310). At this time, a dialogue message is 
also displayed on the LCD for registering the electronic 5 
telephone card that has been purchased. Then, when 
the user selects "register." the mobile us& terminal initi- 
ates the telephone card registration process. 
[0732] The telephone card registration processing is 
shewn in Fig. 65C. The telephone card registration 10 
process is be^n when the dialogue message for regis- 
tering an electronic telephone card for use is displayed 
on the LCD. To display the dialogue message tor the 
use registration, the execution switch 311 is depressed 
immediately after the electronic telephone card is pur- 15 
chased, or while an electronic telephone card that has 
not yet been registered is displayed ("unregistered" is 
displayed as the state of the telep^ne card). 
[0733] The dialogue message for registration has two 
operating menus: "register" and "cancel." When the 20 
user selects "cancel." the telephone card registration 
process is canceled. When the user selects "re^ster" 
(registration operation of an electronic telephone card: 
6508), the nfKSbile user temiinal transmits, to the service 
providing system, a telephone card registration request 25 

6509. which is a message requesting the registration of 
an electronic telephone card. In the service providing 
system, the sen/ice server 900 compares the contents 
of the received telephone card registration request 6509 
with the user information in the user information server 30 
902. The service server 900 ^xlates the management 
information that is stored in the sen^ice director informa- 
tion server 901 for an electronic telephone card that has 
been registered. The service server 900 registers the 
electronic telephone card, and transmits, to the mobile 35 
user terminal, a telephone card certificate issuance 
message 6510. which includes a c&trficate for the reg- 
istered electronic telephone card. 

[0734] Upon receiving the telephone card certificate 

6510, the mobile user tern^nal displays the registered 40 
electronic telephone card on the LCD ("registered" is 
displayed as the state of the telephone card) (display a 
registered telephone card: 6511). 

[0735] The telephone card setup processing will now 
be described. as 
[0736] The telephone card setup process is a process 
for. in accadance with a contract entered into by the 
service provider and the comnrujnication service pro- 
vider, setting and Lpdating an electronic telephone card 
that is to be processed by the electronic telephone card so 
accounting machine 800 of the switcNng center 105. 
[0737] The telephone card setup process is not per- 
formed according to a special processing sequence, but 
is performed during the data updating processing (Fig. 
57B) wfien the service provicfing system updates the ss 
data in the electronic telephone card accounting 
machine 800 of the switching center 105. 
[0738] When a time that has been set in advance is 


reached, the electronic telephone card accounting 
macNne 800 automatically initiates the data updating 
process, and transmits, to the service providing system, 
a data ipdate request 5702. which is a message 
requesting the performance of the data updating proc- 
ess 

[0739] The service providing system transmits, to the 
electronic telephone card accounting machine 800, a 
data update response 5703, which is a message dis- 
patched in response to the receipt of the data update 
request 5702. 

[0740] Upon receiving the data update response 
5703, the electronic telephone card accounting 
machine 800 generates and transmits, to the service 
providing system, upload data 5704. which is a mes- 
sage in which is included data to be uploaded to the 
service providing system. 

[0741] The service providing system conpares the 
received upload data 5704 with the data in the nDerchant 
information server 903 and generates update data. At 
this time, an electronic telephone card that is to be proc- 
essed is updated, and information for the update is 
included in the update data. 

[0742] Then, the service providing system transmits, 
to the electronic telephone card accounting machine 
800, an update data message 5705 that includes the 
update data that has been generated. The electronic 
telephone card acoounting machine 800 develops the 
update data that is included in the received update data 
message 5705, and updates the internal data. At this 
time, the electronic telephone card that is processed by 
the electronic telephone card acoounting machine 800 
is also updated. 

[0743] In Fig. 70 is shown the telephone card settie- 
ment processing. 

[0744] First, the user sets the mot)ile user terminal to 
the telephone card mode, employs the function switch 
(F1 or F2) to display a telephone card to be used for the 
payment of a communication charge, enters the tele- 
phone number using the number key switches 308, and 
depresses the speech switch 305 (display an electronic 
telephone card and make a call: 7000). The mobile user 
terminal transnmts. to the switching center 105, a micro- 
check call request 7001, which is a message used to 
request communication, using the electronic telephone 
card, with a destination indicated by the telephone 
number that is entered by the user. 
[0745] In the avitching center, the electronic tele- 
phone card accounting machine 800 examines the con- 
tents of the micro-check call request 7001 that has been 
received, and transmits, to the mobile user terminal, a 
micro-check call response 7002. which is a message for 
charging a communication fee V (V > 0) for a specific 
communication time T (T > 0). 
[0746] Upon receiving ttie micro-check call response 
7002. the mobile user terminal subtracts the communi- 
cation fee V from the total remaining amount hekJ by the 
electronic telephone card, and generates and transmits. 
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to the switching center, a telephone nnicro-check 7003. 
which is a message corresponding to a check on which 
the communication fee is entered as the face value. Fur- 
ther, the mobile user terminal displays, on the LCD, a 
message indicating that a call is in process (display, "call 5 
in process": 7004). 

At the switching center, first, the electronic telephone 
card accounting machine exan^nes the contents of the 
telephone miao-check 7003 that has been received. 
Then, the switch 801 transmits, to the telephone termi- jo 
nal 115, a call reception request 7005, which is mes- 
sage for the calling of the telephone terminal 115 
indicated by the telephone number entered by the user. 
[0747] U0on receiving the call reception request 7005, 
the telephone terminal 115 outputs a call tone to notify is 
the owner of the telephone terminal 115 (receiver) that 
a call has been received (display "call reception": 7006). 
When the receiver answers the phone (speech op^- 
tion 7007), the telephone temiinal 115 transmits, to the 
switch 801. a call reception response 7008, which a 20 
message stating that the call is permitted. 
[0748] When the switch 801 receives the call recep- 
tion response 7008, first, the electronic telephone card 
accounting machine generates and transmits, to the 
mobile user terminal, a receipt 7009. which is a mes- ss 
sage con-esporxlirig to a receipt for the telephone micro- 
check 7003 that has been issued. Then, the switch 801 
establishes the connection t>etween the nmbile user ter- 
minal and the telephone terminal, so that the user can 
communicate with the caller. At this time, the display on 30 
the LCD of the mofc)ile user terminal is changed to one 
related to the connected state (telephone number for 
the current communication, the elapsed time and the 
total remaining amount held by the electronic telephone 
card) (display "line is connected": 7010). 35 
[0749] When the period of communication time 
exceeds T. instead of transmitting the telephone micro- 
check 7003 having the face value V, the electronic tele- 
phone card accounting machine transmits, to the nx^bile 
user terminal, a communication charge message 701 1 40 
for an electronic micro-check for an amount charged 
that has a face value that equals a communication fee 
2V for a communication time 21. 
[0^] Upon receiving the communication charge 
7011. the nrK3bile user terminal further subtracts the 45 
communication fee V from tiie total remaining amount 
held by the electronic telephone card, and generates 
and transmits, to the switching center, a telephone 
micro-check 7012 for which the communication fee 2V 
Is entered as the face value. so 
[0751] The electronic telephone card accounting 
machine examines the contents of the electronic tele- 
phone micro-check 7012 that is received, and gener- 
ates and transmits, to the vnobile user terminal, a receipt 
701 3, which is a message oorrespondng to a receipt for ss 
the electronic micro-check 7012. 
[0752] Upon receiving the receipt 7013. the mobile 
user terminal updates the total remaining amount held 


by the electronic telephone card that is displayed on the 
LCD (cGsptay accounting 7014). 
[0753] Thereafter, each time the oomnujnication time 
exceeds NT (N is a natural number), the electronic tele- 
phone card accounting n^chine transmits, to the mobile 
user terminal 100, a communication charge message 
7015 for an electronic miao-check for which the face 
value is the anrxiunt charged for the communication foe 
(N + 1)V for the communication time (N + 1)T, instead of 
transmitting the telephone micro-check having a face 
value NV. The nwbile user termina! thereafter further 
subti^cts the communication fee V from the total 
remaining amount held by the electronic telephone 
canj, and generates and transmits, to the switching 
center, a telephone micro-check 7016 for which ttie 
oomnxinication fee (N + 1)V is entered as the face 
value. The electronic telephone card accounting 
machine examines the contents of the electronic tele- 
phone micro-check 7016 that is received, and gener- 
ates and transmits, to the mobile user terminal, a receipt 
701 7. wNch is a message coaesponding to a receipt for 
the electronic nrvcro-check 7016. Upon receiving the 
receipt 7017. the mobile user terminal updates tiie total 
remaining anroiffit held by the electronic telephone card 
that is displayed on the LCD (display accounting 7018). 
[0754] The messages, such as the call reception 
request 7005 and ttie call reception response 7008. that 
are exchanged by the switching center 105 and the tel- 
ephone terminal 115 depend on the protocol estat)- 
lished for the line connection between the switching 
center 105 and the telephone terminal 1 15. 
[0755] The payment card reference processing is 
shown in Rg. 73. 

[0756] The telephone card reference process is not 
performed in accordance with a special processing 
sequence, but is performed during the data updating 
processing, when the service providing system updates 
tiie data in the electronic telephone card accounting 
machine. 

[0757] When a time that has been set in advance is 
reached, the electronic telephone card accounting 
machine automatically initiates tiie data updating proc- 
ess, and ti-ansmits. to the service providing system, a 
data update request 5702, which is a message request- 
ing that the data updating process be performed. 
[0758] The service providing system thereafter trans- 
mits, to the electronic telephone card accounting 
machine, a data update response 5703. which is a mes- 
sage transmitted as a reply to the data update request 
5702 that was received. 

[0759] The data update response 5703 includes infor- 
mation indicating the range of the data tiiat is to be 
uploaded (update option code 8809: Fig. 88B). Upon 
receiving the data update response 5703. the electronic 
telephone card accounting machine generates and 
transmits, to the service providing system, uptoad data 
5704, which is a message in which is included the data 
that is to be uploaded to the service providing system. 
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At this time, the upload data 5704 includes information 
for a new telephone micro-check that is processed dur- 
ing the telephone card clearing process. 
[0760] tn the service providing system, the service 
server 900 compares the received upload data 5704 
with the data in the merchant information server 903, 
and generates data for updating the electronic tele- 
phone card accounting machine. Then, the service 
server 900 transmits, to the electronic telephone card 
accounting machine, an update data message 5705 
that includes the data for updating the electronic tele- 
phone card accounting machine. 
[0761] The electronic telepfK>ne accounting nr«chine 
develops the update data that is included in the received 
update data message 5705. and updates the internal 
data. 

[0762] The service providing system also compares 
information for the telephone micro-check with the man- 
agement information that is stored in the service direc- 
tor information server 901 for the registered electronic 
telephone card, and examines the telephone micro- 
check to determine whether it is valid. The telephone 
card reference results are transmitted to a communica- 
tion service provider by electronic mail or t>y regular 
mail. 

[0763] If the firm represented by the communication 
service provkler differs from that represented by the tel- 
ephone card issu^. and a payment for the communica- 
tion service provider who handles the telephone micro- 
check is made by the telephone card Issuer, or if the 
usage of the telephone card is perkxlically reported to 
the telephone card issuer in acoordarKe with the terms 
of a contract, in accordance with the results that are 
obtained by the telephone card refereru^e process, the 
service providing system, for exarr|)le, weekly gener- 
ates a usage condition notification 7300, which is a 
message notifying the telephone card issuer of the tele- 
phone card usage condition, and transmits it to the tele- 
phone card issuing system 109. 
[0764] In Fig. 76 is shown the telephone card transfer 
processing. 

[0765] In Fig. 76 is shown a case where user A trans- 
fers an electronic telephone card to user 6. The basic 
processing is the same whether infrared communication 
or digital wireless communication is employed by the 
users A and B. 

[0766] First, an explanation will be given when infrared 
communicatk)n is employed between the users A and B. 
[0767] The telephone card transfer process is initiated 
when the users A and B orally agree to the transfer of an 
electronic telephone card. 

[0768] First, user A sets the mobile user terminal to 
the telephone card mode, and employs the function 
switch (Fl or F2) to display on the LCD a telephone card 
that is to be transferred. User A depresses the function 
switch (F3) to display the operating menu for the elec- 
tronic telephone card, and selects "telephone card 
transfer." Thereafter, the user A depresses the execu- 


tion switch while directing the infrared communication 
port toward the infrared communication port of the 
mobile user terminal of user B (telephone card transfer 
operation 7600). Then, via infrared communication, the 

5 mobile user terminal belonging to user A transmits, to 
the mobile user terminal belonging to user B. a tele- 
phone card transfer offer 7601, which is a message 
offering to transfer an electronic telephone card. 
[0769] Upon receiving the telephone card transfer 

10 offer 7501 , the mobile user terminal belonging to user B 
examines the contents of the telephone card transfer 
offer 7601 . and displays on the LCD the contents of the 
etectronk; telephone card that is to be trarrsfen-ed (dis- 
play transfer offer: 7602). 

15 [0770] User B confirms the contents displayed on the 
LCD, and depresses the execution switch, wfHie direct- 
ing the infrared communication port toward the infrared 
communication port of the nrtobile user terminal t)elong- 
ing to user A (transfer offer acceptance operatk>n 7603). 

20 Then, via infrared comnuinication. the mobile user ter- 
minal belonging to user B transmits, to the mot>ile user 
terminal betonging to user A. a telephone card transfer 
offer response 7604, whk;h is a message transmitted in 
response to the telephone card transfer offer 7601 . The 

25 mobile user terminal of user A displays on the LCD the 
contents of the telephone card transfer offer response 
7604 (display the transfer offer response: 7605) that has 
been received. In addition, via infrared communicatk)n, 
the mot>ile user terminal of user A transmits to the 

30 mobile user terminal of user B a telephone card transfer 
certrfk:ate 7606, which is a message corresponding to a 
certrfk;ate for the transfer of the electronic telephone 
card to user B. 

[0771 ] The mobile user terminal of user B examines 

35 the tel^hone card transfer certificate 7606 that has 
been received, and via infrared communication trans- 
mits a telephone card receipt 7607. which is a message 
stating that the electronic telephone card has been 
transfenred, to the mobile user terminal of user A. 

40 [0772] Upon receiving the telephone card receipt 
7607. the rTX)bile user terminal of user A displays on the 
LCD a transfer completion message (display transfer 
completion: 7608). The processing for the mobile user 
terminal of user A (sender) is thereafter terminated. 

45 [0773] After transmitting the telephone card receipt 
7607. the rTX}bile user terminal of user B displays on the 
LCD the telephone card transfer certificate 7606 that 
has been received. The mobile user terminal also dis- 
plays a dialogue message to ask the user whether the 

50 transfer process with the service server (the process for 
downloading a transferred electronic telephone card 
from the servk:e providing system) should be perfornf)ed 
immediately (display the transfer certifk:ate: 7609). 
[0774] The dialogue message includes two operating 

55 menus: "transfer request" and ''cancel.*' When ''cancel'* 
is selected, the current transfer process being per- 
formed with the servk^e provding system is canceled. 
During the process (data updating process) wherein the 
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service providing system updates the data in the mobile 
user terminal of user B, the electronic telephone card 
that has been transfen-ed is set up as a part of the 
update data for the mobile user terminal of user B, 
[0775] When user B selects 'transfer request" (trans- s 
fer request operation 7610). the nrK3bile user terminal 
employs the telephone card transfer certificate 7606 to 
generate a telephone card transfer request 761 1, which 
is a message requesting the transfer process be per- 
formed with the service providing system, and transmits w 
the request 761 1 to the service providing system via 
digital wireless telephone oonrmunication. 
[0776] The service providing system examines the 
contents of the telephone card transfer request 761 1 
that has been received, and via digital wireless tele- is 
phone communication, transmits to the mobile user ter- 
minal of user B a telephone card transfer message 7612 
that includes the electronic telephone card that was 
transferred by user A. 

[0777] Upon receiving the telephone ccud transfer 20 
message 7612. the mobile user terminal of user B dis- 
plays the electronic telephone card on the LCD (display 
the electronic telephone card; 7613). The telephone 
caid transfer processing is thereafter terminated. 
[0778] Next, an explanation will be given Ibr dgital 2s 
wireless telephone communication between users A 
andB. 

[0779] For this type of communication, the telephone 
card transfer process is also initiated when users A and 
B orally agree on the transfer of an electronic telephone 30 
card. At this time, users A and B are using digital wire- 
less telephones to communicate with each other. 
[0780] Rrst, user A sets the mobile user terminal to 
the telephone card nrxxje arrd an^rioys the furv;tion 
witch (F1 or F2) to display on the LCD a telephone card 35 
to be transferred. User A then depresses the function 
mitch (F3) to display the operating menu for the elec- 
tronic telephone card. The user selects telephone card 
transfer" and depresses the execution switch (telephone 
card transfer operation 7600). Then, via digital wireless 4o 
telephone communication, the mobile user terminal of 
user A transmits, to the oKibile user terminal of user B, 
a telephone card transfer offer 7601. which is a mes- 
sage offering to transfer an electronic telephone card. 
[0781] Upon receiving the telephone card transfer 4S 
offer 7601. the mobile user terminal of user B examines 
the contents of the telephone card transfer offer 7601 . 
and displays on the LCD the contents of the electronic 
telephone card that is to be transfenred (display transfer 
offer: 7602). so 
[0782] The user B confirms the contents displayed on 
the LCD. and depresses the execution switch (transfer 
offer acceptarx;e operation 7603). Then, through digital 
wireless telephone communication, the nxibile user ter- 
minal of user B transmits, to the mobile user terminal of 55 
user A, a telephone card transfer offer response 7604, 
which is a response message for the telephone card 
transfer offer 7601. 


[0783] The mobile user temiinal of user A displays on 
the LCD the contents of the received telephone card 
transfer offer response 7604 (display the transfer offer 
response: 7605). Thereafter, via digital wireless tele- 
phone communication, the mobile user terminal trans- 
mits to the mobile user terminal of user B a telephme 
card transfer certificate 7606. which is a message corre- 
sponding to a certificate for the transfer of the electronic 
telephone card to user B. 

[0784] The mobile user terminal of user B examines 
the received telephone card transfer certificate 7606 
and via digital wireless telephone communication trans- 
mits a telephone card receipt 7607, which is a message 
stating that the electronic telephone card has been 
transferred to user B, to the mobile user terminal of user 
A. 

[0785] Upon receiving the telephone card receipt 
7607, the nfK3bile user terminal of user A displays a 
transfer completion message on the LCD (display trans- 
fer completion: 7608). The processing for the mobile 
user terminal of user A (sender) is thereafter termi- 
nated. 

[0786] After transmitting the telephone card receipt 
7607. the mobile user terminal of user B displays on the 
LCD the recaved telephone card transfer certificate 
7606. Also, the mobile user terminal displays a dialogue 
message asking the user whether the transfer process 
with the service server (the process for downloading a 
transfen'ed electronic telephone card from the service 
providing system) should be perfomied immediately 
(display the transfer certificate: 7609). 
[0787] Included in the dialogue message are two 
operating menus: **transfer request" and "carv:el." When 
"cancer is selected, the current transfer process that is 
being conducted with the service providing system is 
canceled. During the process (data updating process) 
whereby the service providing system updates the data 
in the mobile user terminal of user B. the electronic tel- 
ephone card that has been transferred is set in the 
mobile user terminal of user B as a part of the update 
data. 

[0788] When the user B selects "transfer request" 
(transfer request operation 7610). the mobile user ter- 
minal disconnects the communication line leading from 
user A and connects the digital wireless telephone com- 
munication line with the service providing system. Then, 
the nx)bile user terminal employs the telephone card 
transfer certificate 7606 to generate a telephone card 
transfer request 761 1 , which is a message requesting 
the transfer process be performed with the service pro- 
viding system, and transmits the request 761 1 to the 
service providing system via digital wireless telephone 
comnunication. 

[0789] The service providing system examines the 
contents of ttie received telephone card transfer request 
761 1 , and via digital wireless telephone communication, 
transmits to the mot>ile user terminal of user B a tele- 
phone card transfer message 7612 that includes the 
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electronic telephone card that is being transferred by 
user A. 

[0790] Upon receiving the telephone card transfer 
message 7612, the nriobile user terminal of user B dis- 
plays the electronic telephone card on the LCD (display s 
the electronic telephone card: 7613). The telephone 
card transfer processing is thereafter terminated. 
[0791] In Fig. 79 Is shown the electronic telephone 
card installation processing. 

[0792] Rrst. the user sets the mobile user terminal to io 
the telephone card mode and employs the function 
switch (F4) to display the operating menu for the tele- 
phone card nrKxje. The user then selects "instair and 
displays the installation screen on the LCD. Thereafter, 
the user employs the nurr^er key switches to enter the is 
installation card number and the installation number 
that are printed on the electronic telephone card instal- 
lation card, and depresses the execution switch 311 
(installation operation 7900). The mobile user temninat 
then transmits to the service providing system 110 an so 
installation request 7901, which is a message request- 
ing the installation of an electronic telephone card. 
[0793] The service providing system 1 1 0 specifies an 
installation card issuer ty referring to the installation 
card number that is included in the received electronic ss 
telephone card installation request 7901, and transmits 
to the telephone card issuing system of that issuer a tel- 
ephone card installation request 7902. which is a mes- 
sage requesting that a telephone card be issued. 
[0794] (n the telephone card issuing system, the tele- 30 
phone card issuing server 1300 compares the installa- 
tion card number and the installation number, which are 
included in the telephone card installation request 7902 
that has been received, with the management informa- 
tion that is stored in the telephone card issuing informa- 35 
tion server 1302 for the electronic telephone card 
installation cards that have been issued. In addition, the 
telephone card issuing server 1300 updates the data in 
the customer information server 1301, in the telephone 
card issuing information sen/er 1302, and in the tele- 4o 
phone card infonmation server 1303. The telephone 
card issuing server 1300 then generates the data for the 
requested telephone card, and transmits to the service 
providing system an electronic telephone card installa- 
tion commission 7903. which is a message requesting 4S 
the installation of an electronic telephone card that cor- 
responds to the telephone card that has been 
requested. 

[0795] Upon receiving the electronic telephone card 
installation conrwnission 7903, the service providing sys- so 
tern generates an electronic telephone card, and to 
install the electronic telephone card in the mobile user 
terminal, transmits to the nrKsbile user terminal an elec- 
tronic telephone card installation message 7904. 
[0796] The motMie user terminal installs the electronic ss 
telephone card that is included in the received elec- 
tronic telephone card installation message 7904. and 
displays on the LCD the installed electronic telephone 


. card (display the electronic telephone card: 7905). 
[0797] A detailed explanation will be given later for the 
contents of the messages that are exchanged by the 
devices during the above electronic telephone card 
service processing. 

[0798] The electronic credit card service wilt now be 
described. 

[0799] The electronic credit card service includes two 
settlement processes: a network credit settlement proc- 
ess, for a credit clearance for the price of a product for 
the purchase of a ticket, for a payment card purchase 
and for telephone card processes; and a real credit set- 
tlement process for a credit clearance at a common 
retail shop. etc. Since the network credit settlement 
processing has been desabed for the purpose of a 
ticket purchase, for a payment card purchase and for 
telephone card purchase processes, the real credit set- 
tlement processing will now be described, 
[0800] In Fig. 84 is shown the real credit settlement 
processing. 

[0801] First, the user notifies the merchant that an 
electronic credit card will be empk>yed for the payment 
Cinstruct settlement to be made with an electronic credit 
card: 8400). 

[0802] The merchant depresses the credit card setU e- 
ment switch 513 (the function switch F3 for the mer- 
chant terminal 103) (depress the aedit card settlement 
8Mtch: 8401), and permits the user to start the payment 
operation (instruct the start of the payment operation: 

8403) . At this time, the total charge and a message indi- 
cating that the merchant terminal is waiting for the user 
to initiate the payment operation to be performed by the 
user are displayed on the LCD of the merchant terminal 
102 or 103 (display "waiting for the payment operation": 
8402). 

[0803] The user sets the nx>bile user terminal to the 
aedit card mode, employs the function switch (F1 or F2) 
to display a payment card to be used for the payment, 
and enters the amount to be paid and the number of 
payments. Then, while directing the infrared communi- 
cation port 300 to the infrared communication rtKxlule of 
the merchant terminal (the infrared communication port 
for the merchant terminal 103) (payment operation 

8404) , the user depresses the execution switch 31 1 . 
[0804] The mobile user terminal generates a payment 
offer 8405 that includes the aedit car6 type, the amount 
to be paid and the number of payments that are entered 
by the user, and that is a message offering to pay the 
merchant the quoted price. The payment offer 8405 is 
transmitted to the merchant terminal via infrared com- 
munication. 

[0805] Upon receiving the payment offer 8405, the 
merchant terminal examines the type of credit card arxl 
the amount of the payment, and via infrared communi- 
cation, transmits to the mobile user terminal a paymertt 
offer response 8406, which is a response message for 
the payment offer 8405. In additbn, via digital telephone 
communication the merchant terminal transn^, to the 
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service prcviding system 1 10, an authorization raquest 
8409, which Is a message requesting an authorization 
for the user. At this time, the message indicating that the 
authorization process is in progress is displayed on the 
LCD of the merchant terminal (display "authorization 5 
process in progress": 8407). 
[0806] The mobile user terminal 1 00 receives the pay- 
ment offer response 8406 from the infrared communica- 
tion port 300, and corrpares the anxxint charged 
included in the response 8406 with the amount of the 10 
payment. Then, via digital wireless telephone communi- 
cation, the mobile user terminal transmits, to the service 
providing system 110. a payment request 8410. which 
is a message requesting that the payment of a price 
using aedit be permitted. At this time, a message indi- 15 
eating the payment process is in progress is displayed 
on the LCD of the mobile user terminal (display 'pay- 
ment process in progress": 8408). 
[0807] The service providing system 1 1 0 receives the 
authorization request 8409 from the merchant terminal 20 
and the payment request 8410 from the mobile user ter- 
minal 100. and conrpares the twa In addition, the serv- 
ice providing system 110 examines the aedit state of 
the user, and generates and transmits, to the merchant 
terminal, an authorization response 8411. which is a 2s 
response message for the authorization request. 
[0808] Upon receiving the authorization response 
841 1 from the service providing system 1 10. the mer- 
chant terminal dsplays, on the LCD, the contents of the 
autiiorization response 841 1 , and notifies the operator 30 
(merchant) of tiie authorization results (display the 
authorization results 8412). 

[0809] The operator (merchant) conf irnr^s the contents 
of the authorization, depresses the execution switch of 
the merchant terminal, and instructs the start of the set- 35 
Hement process (settiement process request operation 
8413). Then, via digital telephone communication, the 
merchant terminal transmits, to the service providing 
system 110. a clearance request 8415. which is a mes- 
sage requesting the settiement. and displays on tiie 4c 
LCD a message indicating the settlement is in process 
(display "settiement process in progress**: 8414). 
[081 0] The service providing system 110 receives the 
clearance request 8415 from the merchant terminal, 
and transmits, to the transaction processing system 4S 
106. a clearance request 8416, whidi is a message 
requesting the perfomriance of tiie credit settiement 
process by the transaction processing system 106. 
[0811] Upon receiving the clearing request 8416 at 
the transaction processing system, the transaction so 
server 1000 updates the data in the subscrit)er infomna- 
tion sen/er 1001, in the menrtoer store information 
server 1002 and in the trarrsaction information server 
1003. and performs the aedit settiement process. 
Then, a clearing completion notification 841 7. which is a ss 
message stating that tiie settiement process has been 
completed is tiBnsmitted to tiie service providing sys- 
tem. 
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:[0812] Upon receiving the clearing completion notifi- 
cation 8417, the service providing system g&ierates a 
clearing completion notification 8418. which is a mes- 
sage stating that the settiement process has been com- 
pleted, and transmits it to tiie merchant terminal. 
[0813] Upon receiving the clearing completion notifi- 
cation 8418, the merchant terminal generates a receipt 
message 8419. which con^esponds to a receipt, and 
transmits it to tiie service provicfing system. The mer- 
chant terminal also displays on tiie LCD the contents of 
tiie clearing conpletion notification 8419 in order to 
notify the operator (merchant) tiiat the settiennent proc- 
ess has been completed (display clearing completion: 
8420). 

[0814] Upon receiving the recept message 8419, the 
service providing system generates a recept message 
8421 . and tiansmits it to tiie mobile user terminal. 
[0815] The mobile user terminal 100 displays, on the 
LCD. the contents of tiie receipt 8421 tiiat has been 
received, and notifies the user of the completion of the 
settiement process (display the receipt: 8422). 
[081 6] A detailed explanation will be given later for tiie 
messages that are exchanged by the devices during the 
above electronic aedit card service process. 
[081 7] The internal structure of the oKsbile user termi- 
nal 100 will now be described. 
[0818] Fig. 15 is a block diagram illustrating tiie 
anrarigement of the mobile user terminat 100. This ter- 
minal 100 comprises: a CPU (Cemral Processing Unit) 
1 500, which employs a program staed in a ROM (Read 
Only Memory) 1501 to process data for transmission 
and for reception, and to control the other components 
via a kjus 1529; a RAM (Random Access Memory) 

1502. in which are stored data that are processed and 
tiiat are to be processed by tiie CPU 1500; a EEPROM 
(Electric Erasable Programmable Read Only Memory) 

1 503. in which are stored a terminal ID and a telephone 
number for tiie mobile user terminal 100 when used as 
a wireless t^ephone terminal, a user ID. a code number 
for a user, a private key and a public key for a digital sig- 
nature, a service provider ID. and the telephone number 
and the public key of the service providing system 110 
(the digital signature of the service provider is accompa- 
nied by the telephone number of the service providing 
system); an LCD controller 1504. which operates tiie 
LCD 303 under the control of tiie CPU 1500. and which 
displays on tiie LCD an image that is set up by the CPU 
1500; a cryptographic processor 1505. which enaypts 
and deaypts data under tiie control of the CPU 1500; a 
data codec 1506, which under the control of the CPU 
1500 encodes data to be transmitted and decodes data 
tiiat is received; an infrared communication module 
1507, which fransmits and receives infrared rays during 
infrared communication; a key operator 1509, which 
detects tiie manipulation by the user of the mode switch 
304. the speech switch 305, the end switch 306, tiie 
function switch 307. the number key switch 308. tiie 
power switch 309 and tiie execution switch 311; an 
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audio processor 1511, which drives a loudspeaker 
1510, a recefver 302 or a headphone set that Is con- 
nected to a headphone jack 312. artd amplrfles an ana- 
log audio signal that is input through the microphone 
„ 310 or the headphone head; an audio codec 1512, § 
which encodes an analog audio signal 1542 to provide 
digital audio data, and decodes dgital audio data to pro* 
vide an analog audio signal 1543; a channel codec 
1513, which generates data to be transmitted along a 
radio channel, and which extracts, from received data, w 
data that is addressed to the mobile user terminal 100; 
a modulator 1514. which modulates a serial digital sig- 
nal 1547 input by the channel codec 1513 to obtain an 
analog transmission signal 1549 that employs as a 
baseband an electric si^l 1552 that is transmitted by 75 
a PLL 1516; a denxxlulator 1515. which, to obtain a 
serial digital signal 1548. demodulates a received ana- 
log signal 1 550 while employing as a baseband an elec- 
tric signal 1553 that is supplied by the PLL 1516, and 
which transmits the serial cfigital signal 1548 to the so 
channel codec 1513; an RF unit 1517, which changes 
the analog transmission signal 1549 received from the 
modulator 1514 into a radio wave and outputs it through 
an antenna 301, and which, upon receiving a radio 
wave through the antenna 301, transmits an analog ss 
reception signal 1550 to the demodulator 1515; a bat- 
tery capacity detector 1518, which detects the capacity 
of the battery of the mobile user terminal 100; and a 
control k}g(c unit 1508. which activates the channel 
codec 1513, the PLL 1516 and the RF unit 1517, and 30 
which processes interrupt signals, transmitted by the 
key operator 1509. the channel codec 1513 and the bat- 
tery capacity detecta 1518. and serves as an interface 
when the CPU 1500 accesses the internal registers of 
the key operator 1509, the audio processor 1511, the 35 
audio codec 1512 and the channel codec. 
[0819] The cryptographic processor 1505 includes a 
seaet key encryptk>n and decryption function and a 
public key encryption and decryption functwn. The cryp- 
tographic processor 1505 enrploys a cryptography 40 
method determined by the CPU 1500 and the keys to 
encrypt or decrypt data set by the CPU 1500. The 
encryption and decryption functions of the crypto- 
grapNc processor 1505 are employed to perform a dig- 
ital signature process or a closing process for a 45 
message, and to decrypt a closed and encrypted mes- 
sage or to verify a digital signature accompanying a 
message. A detailed explanation will be given later for 
the digital signature process, the closing process, the 
decryption process, and the digital signature verification so 
process. 

[0820] The data codec 1 506 encodes data to be trans- 
mitted or decodes data that is received under the con- 
trol of the CPU 1500. In this case, the encoding is a 
process for generating data to be transmitted that 55 
includes convnunication control information and error 
correction information, eind the decoding is a process 
fa performing error correction for the received data and 


for removing extra conrtmunication control information in 
order to obtain the data that a sender was originally to 
transmit. The data codec 1 506 has a function for encod- 
ing or decoding data during data communication per- 
formed using a digital wireless telephone, and a 
function for encoding or decoding data during infrared 
comrmjnication. The data codec 1506 performs encod- 
ing or decoding, as determined by the CPU 1500. for 
data that are set by the CPU 1500. 
(0821] When, for example, a closed message accom- 
panied by a digital signature is to be transmitted via dig- 
ital wireless telephone communication, the CPU 1500 
employs the cryptographic processor 1505 to perform a 
digital signature process and a ck>sing process for a 
message, enploys the data codec 1506 to encode the 
obtained message to provide a data communication 
form for a digital wireless telephone, and transmits the 
resultant message via the control logic unit 1508 to the 
channel codec 1513. 

[0822] When a cfosed message accompanied by a 
digital signature is received via digital wireless tele- 
phone communication, the CPU 1500 reacte that mes- 
sage from the channel codec 1513 through the control 
fogic unit 1508, employs the data codec 1506 to decode 
the received message, and permits the ayptographic 
processor 1505 to deaypt the dosed and encrypted 
message and to verify the digital signature accompany- 
ing the message. 

[0823] Similariy. when a closed message accompa- 
nied by a digital signature is to be transmitted via infra- 
red communication, the CPU 1500 employs the 
ayptographic processor 1 505 to provide a digital signa- 
ture for the message and to cfose the message, arxJ 
employs the data codec 1506 to encode the obtained 
message to provide a data form suitable for infrared 
communication. Then, the resultant message is trans- 
mitted to the infrared communication module 1507. 
[0824] When a closed message accompanied by a 
digital signature is received via infrared communicatfon. 
the CPU 1500 reads that message from the infrared 
comnuinication module 1507, empfoys the data codec 
1506 to decode the received message, and permits the 
ayptographic processor 1 505 to decrypt the cfosed and 
enaypted message and to verify the digital signature 
accompanying the message. 
[0825] When the user depresses either the mode 
switch 304. the speech switch 305. the end switch 306. 
the function switoh 307. the number key switch 308, the 
power switch 309. or the execution switoh 311 the key 
operator 1509 detects the switch manipulation by the 
user and asserts an interrupt signal 1538 requesting the 
performance of a process corresponding to the switch 
that was manipulated. As is shown in Fig. 16A. the key 
operator 1509 includes a key control register (KEYCTL) 
1612 for setting the valid/invalid state of each switoh. 
The CPU 1500 accesses the key control register (KEY- 
CTL) 1612 to set the valid/invalid state of each switch. 
[0826] The audfo processor 151 1 includes an audfo 
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control register (SCTL) 1611 for oontrolli.ng the audio 
process, as is shewn in Fig. 16A. The CPU 1500 
accesses the audio control register (SCTL) 161 1 to con- 
trol the audio processor 151 1 . When, for example, a call 
request cnbt a digital wireless telephone is received .the s 
CPU 1500 accesses the audio control register (SCTL) 
1611 to output a call tone for a digital wireless tele- 
phone. As a result, the audio processor 1 51 1 drives the 
loudspeaker 1510 to release the call tone for a cfigital 
wireless telephone. It should be noted that when a call w 
request is from the service providing system 110. no 
call arrival tone is output, and the CPU 1500 initiates a 
process for estat)lishing a communication session with 
the service providing system. 

[0827] The audio codec 1512 encodes an analog is 
audio signal 1542 received from the audio processor 
151 1 to provide digital audio data, and decodes digital 
audio data received from the channel codec 1513 to 
provide an analog audio signal 1543. The analog audio 
signal 1 543 is transmitted to the audio processor 1511, 20 
which amplifies the signal 1543 and drives the receiver 
302 to produce sounds. The encoded digital audio data 
are transmitted as a digital audio signal 1546 to the 
channel codec 1513. which converts the data into data 
that can be transmitted aaoss the radio channel. 25 
[0828] In addition, the audio codec 1512 includes an 
audio data encryption key register (CRYPT) 1613 in 
which is stored an encryption key for the secret key 
cryptography method that is employed for encryption 
and decryption of audio data. When the audio data 30 
encryption key is set to the audio data encryption key 
regster (CRYPT) 1613 by the CPU 1500. the aucfio 
codec 1512 encodes the analog audio signal 1542 to 
provide digital audio data, and at the same time 
encrypts the digital audio data, or decodes the digital 35 
audio data to provide an analog audio signal 1543 while 
simultaneously decrypting the audio data. 
[0829] Two types of data to be transmitted are 
received by the channel codec 1513: one type is cfigital 
audb data originating at the audio codec 1512 as a dig- 40 
ital audio signal 1546, and the other type is data-com- 
munication data originating at the CPU 1500 that pass 
through the control logic unit 1508 as a digital signal 
1556. 

[0830] The channel codec 1513 adds identification 4S 
data, as header information, to digital audio data and 
data-communication data, then converts the data into a 
serial digital signal 1547 having a data format that is 
suitable for a digital wireless telephone, and transmits 
the signal 1 547 to the modulator 1514. so 
[0831 ] In addition, upon receiving a serial digital signal 
1548 from the demodulator 1515. the channel codec 
1513 examines a terminal ID and extracts only such 
data as is addressed to the channel codec 1513. 
removes the communication control information for the ss 
digital wireless telephone, identifies the digital audio 
data and the data-communication data in the header 
information, and transmits these data as a digital audio 


signal 1546 and a digital signal 1556 to the audio codec 
1512 and the control logic unit 1508 respectively 
[0832] Further, upon receiving a digital wireless call or 
data-communication data, the channel codec 1513 
asserts an interrupt signal 1554. and upon receiving 
digital audio data, brings the control signal 1544 low. 
The interrupt signal 1554 is a signal requesting tiiat the 
CPU 1500 perform a process for a received digital wire- 
less phone communication and a process for data-com- 
munication data. The corrtrol signal 1544 is a low-active 
signal for requesting that the audio codec 1512 process 
the received digital audio data. 
[0833] In order to perform these processes, as is 
shown in Fig. 16A, the channel codec 1513 includes: an 
ID register (ID) 1605, in which is stored a terminal ID; a 
channel codec control register (CHCTL) 1606, which 
controls the operation of the channel codec 1513; an 
audio transmission buffer 1607. in which are stored dig- 
ital audio data received from the audio codec 1512; an 
audio reception buffer 1608. in which are stored digital 
audio data exti^cted from received data; a data trans- 
mission buffer 1609. in which are stored data-communi- 
cation data received from the control logic unit 1508; 
and a data reception buffer 1610, in which are stored 
data-communication data extracted from received data. 
[0834] A comrol signal 1 545 is a control signal direct- 
ing tiie audio codec 1 51 2 to write data to tiie data trans- 
mission buffer 1607 and to read data from the data 
reception buffer 1608. When tiie control signal 1545 
goes low. tiie digital audio data are written to the data 
tiBnsmisston buffer 1607, and when the control signal 
1545 goes high, the digital audio data are read from the 
data rec^tion buffer 1609. 

[0835] A control signal 1555 is a control signal with 
which the CPU 1500 directs tfie channel codec 1513, 
via tiie control k>gic unit 1508. to write data to tiie data 
transmission buffer 1609 and to read data from the data 
reception buffer 1610. When tiie control signal 1555 
goes tow. tiie data-communication data are written to 
tiie data transmission buffer 1609, and when tiie cortrol 
sigreil 1555 goes high, the data-communication data 
are read from the data reception buffer 1610. 
[0836] The modulator 1514 modulates a serial digital 
signal 1547 received from tiie channel codec 1513 to 
provide an analog ti^ansmission signal 1549. which is 
employed as a baseband for an electric signal 1 552 that 
is supplied by the PLL 1516. and transmits the signal 
1549 to the RF unit 1517. The analog transmission sig- 
nal 1549 received by tiie RF unit 1517 is output as a 
radio wave ttirough the antenna 301 . 
[0837] When a radio wave is received at the antenna 
301. an analog reception signal 1550 is transmitted by 
the RF unit 1517 to the demodulator 1515. The demod- 
ulator 1515 denrxxjulates the analog signal 1550. while 
etrploying as its basetsand an electric signal 1553 that 
is supplied by the PLL 1516, and transmits an obtained 
serial digital signal 1548 to the channel codec 1513. 
[0838] The battery capacity detector 1 51 8, for detect- 
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ing the capacity of a battery, asserts an interrupt signal 
1557 when the remaining capacity of the battery of the 
mobile user temninal 1 00 is equal to or less than a value 
Q (Q > 0) that is set by the CPU 1500. The interrupt sig- 
nal 1557 is a signal, for requesting that the CPU 1500 5 
perform a data backup process for the RAM 1502. The 
value Q is large enough to enable the mobile user termi- 
nal 100 to communicate with the service providing sys- 
tem 1 10 in order to back up data in the RAM 1502 for 
the service providing system 110 (data backup proc* w 
ess). 

10839] The control logic unit 1 508, as is shown in Fig. 
16A. includes five internal registers: a frame counter 
(FRAMEC) 1600, a start frame register (FRAME) 1601. 
a clock counter (CLOCKC) 1602, an update time regis- is 
ter (UPTIME) 1603, and an interrupt register (INfT) 
1604. 

[0840] The frame counter 1600 is employed to count 
the number of frames for the digital wireless telephone: 
the start frame register 1601 is employed to store the 20 
franie number of the frame that is to be activated next: 
the clock counter 1602 is employed to measure the cur- 
rent time; the update tinf>e register 1603 is enrpbyed to 
store the time at which the nf>obile user terminal 100 will 
communicate with the sen^ice providing system 1 10 to 2s 
update data in the RAM 1502 (data updating process): 
and the intenoipt register 1604 is employed to indicate 
the reason an interrupt was generated for the CPU 
1500. 

[0841] Generally, to receive a call the digital wireless 30 
telephone intermittently acquires control data for a con- 
trol channel and compares it with the terminal ID. The 
mobile user terminal 100 employs the frame counter 
1600 and the start frame register 1601 to irrtermtttently 
acquire control data. First, \he frame number of the 35 
frame to be activated next is stored in advance in the 
start frame register 1601, and when the count value of 
the frame counter 1600 equals the amount heki by the 
start frame register 1601. to acquire control data the 
control logic unit 1508 activates the channel codec 40 
1513. the PLL 1516 and the RF unit 1517 via an 
address data signal line 1558. 
[0842] When the value of the dock counter 1602 
matches the amount in the update time register 1603. or 
when one of the interrupt sigpials 1558, 1554 and 1557 4S 
is asserted, the control togic unit 1508 writes the reason 
for the inteaupt in the interrupt register (INT) 1604, and 
asserts an interrupt signal 1519 requesting that the 
CPU 1500 perform an inten-tpt process. For the inter- 
rupt processing, the CPU 1 500 reads the reason stored so 
in the intenupt register (INT) 1604 and then performs a 
corresponding process. 

[0843] The incfividual bit fields of the interrupt register 
(INT) 1604 are defined as is shown in Fig. 16B. 
[0844] Bit 3 1 represents the state of the power switch 55 
309. When the bit value is 0. it indicates the state is the 
power-OFF state, and when the bit value is 1, it indi- 
cates the state is the power-ON state. 


[0845] Bit 30 represents the digital wireless telephone 
comrrujnication state. When the bit value is 0. it indi- 
cates the state is one wherein no digital wireless tele- 
phone communication is t>eing performed, and when 
the bit value is 1, it indicates the state is one wherein 
digital wireless telephone oomnunication is in progress. 
[0846] Bit 29 represents the generation of a frame 
interrupt requesting the intermittent acquisition of con- 
trol data. When the bit value is 1 . it indicates a condition 
that exists when a frame interruption has occurred. In 
this bit field, a 1 is set when the amount in the frame 
counter 1600 equals the amount held in the start frame 
register 1601. 

[0847] Bit 28 represents the generation of a call arrival 
interrupt. When the bit value is 1, it indicates that a dig- 
ital wireless call has arrived. In this bit field, a 1 is set 
when the terminal ID is matched and the inten^upt signal 
1554 is asserted during the intermittent acquisition of 
control data for the digital wireless phone. 
[0848] Bit 27 represents the generation of a data 
reception inten'upt. When the bit value is 1, it indicates 
that data is being received. In this bit field, a 1 is set 
when the dataK;ommunication data are received and 
the interrupt signal 1554 is asserted during the course 
of digital wireless telephone communication. 
[0849] Bit 26 represents the generation of an update 
interrupt requesting the performance of a data updating 
process. When the bit value is 1 , rt indicates the gener- 
ation of the update interrupt. In this bit field, a 1 is set 
when the amount in the dock counter 1602 matches the 
amount in the update time register 1603. 
[0850] Bit 25 represents the generation of a k}attery 
interrupt requesting a backup process. When the bit 
value is 1, it represents the generation of the t>attery 
interrupt. In this bit field, a 1 is set when the interrupt 
signal 1557 received from the battery capacity detector 
1518 is asserted. 

[0851 ] Bit 24 represents the generation of a key inter- 
rupt by the manipulation of the switch. When the bit 
value is 1 , it represents the generation of the key inter- 
rupt. 

[0852] Bits 0 to 9 correspond to switches 0 to 9 for the 
number key switch 208. Bit 10 and bit 1 1 correspond to 
number key switches and "r and bits 12 to 15 corre- 
sponds to function switches Fl to F4. Bits 16 to 20 
respectively correspond to the power switch 309. the 
execution switch 31 1 , the mode switch 304, the speech 
switch 305, and the end switch 306. When the amount 
of a bit is 1, it indicates that a switch corresponding to 
that bit has been depressed. 

[0853] Data stored in the RAM 1502 wilt now be 
described. 

[0854] Fig. 17 is a specific diagram showing a RAM 
map for data stored in the RAM 1502. 
[0855] The RAM 1 502 is constituted by five areas: a 
fundamental program objects area 1700. a service data 
area 1701, a user area 1702. a work area 1703. and a 
temporary area 1704. In the fundamental program 
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Objects area 1 700 are stored an upgraded module for a 
program stored in the FOM 1501, a patch program, and 
an addrtionai program. 

[0856] The user area 1702 is an area that can be 
- freely usedby a user,-the work area 1 703 is a work area s 
that the CPU 1500 employs when executing a program, 
and the temporary area 1704 is an area in which infor- 
mation received by the mobile user terminal 100 is 
stored temporarily. The service data area 1701 rs an 
area in which is stored contract information for the io 
mobile electronic commerce service, electronic ticket 
infbnnation, electronic payment card informatton, elec- 
tronic telephone card information, electronic credit card 
information, and history information; the data in this 
area are managed by the service providing system 110, 75 
[0&57] The service data area 1 701 is constituted by 1 2 
sub-areas: a data management information area 1705, 
a personal information area 1706, a portrait image data 
area 1707. a user pM\c key certificate area 1708. a 
user preference area 1709, a telephony information 20 
area 1710, a credit card list area 171 1. a ticket list area 
1712. a payment card list area 1713. a telephone card 
list area 1714. a use history area 1715. and an object 
data area 1716. The data management infonmation 
area 1705 is an area in which is stored management ss 
information for data stored in the service data area 
1701; the personal informatron area 1706 is an area in 
whk:h are stored the name, age and gerxler of a user; 
the portrait image data area 1707 is an area in which 
the portrait image data for the face of a user are stored; 30 
the user public Key certificate area 1708 is an area in 
which a public key certificate for a user is stored; the 
user preference area 1 709 is an area in which is stored 
preference information for a user concerning the nxjbile 
electronic commerce servk;e; the tdephony information 35 
area 1710 is an area in which information concerning a 
digital wireless telephone is stored; the credit card list 
area 1711 is an area in which is stored list information 
for credit cards registered by a user; the ticket list area 
1712 is an area in which is stored list information for 40 
electronic tickets owned by a us^; the payment card list 
area 1713 is an area in which is stored list information 
for electronic payment cards owned by a user; the tele- 
phone card list area 1714 is an area in which is stored 
list information for electronic telephone cards owned by 4S 
a user; the use list area 1715 is an area in which is 
stored use history information for the mobile electronic 
commerce service; and the object data area 1 716 is an 
area in which are stored object data for information 
managed in the other eleven areas. so 
[0858] The private key and the public key that are 
used for the digital signature of a user are updated peri- 
odically, or semi-periodically. At this time, the public key 
certifk;ate for the user stored in the user public key cer- 
tificate area 1 708 is also updated. ss 
[0859] The information stored in the service data area 
1 701 will now be desabed in detail. 
[0860] Fig. 1 8 is a detailed, specif k: diagram showing 


the relationship existing between information stored in 
the service data area 1701. 

[0861 1 The data management information 1 705 con- 
sists of thirteen types of information: a last data update 
date 1800. a next data update date 1801 . a temiinal sta- 
tus 1802, a personal Intonnation address 1803, a por- 
trait image data address 1804. a user public key 
certificate address 1805, a user preference address 
1806, a telephony infamation address 1807, a credit 
card list address 1808. a ticket list address 1809, a pay- 
ment card list address 1810, a telephone card list 
address 181 1 . and a use list address 1812. 
[0862] The last data update date 1 800 represents the 
date on which the service providing system 110 last 
updated the data in the RAM 1502. and the next data 
update date 1801 represents the date on which the 
service providing system 110 will next update data in 
the service data area 1 701 . 

[0863] The amount of the next data update date 1 80 1 
is set in the update time register 1603. When the next 
data update date 1801 is reached, the vndbWe user ter- 
minal 100 initiates the data updating process. During 
the data updating process, the sen^kie provkiing system 
1 10 updates data stored in the RAM 1502. This process 
is perforn)ed daily dmng a period (e.g.. late at night) in 
which communication traffic is not very heavy. The data 
updating process will be described in detail later. 
[0864] The terminal status 1 802 represents the status 
of the mobile user terminal 100; and the personal infor- 
mation address 1803, the portrait Image data address 
1804, the user public key certificate address 1805. the 
user preference address 1806, the telephony informa- 
tfon address 1807, the credit card list address 1808, the 
trcket list address 1809, the payment card list address 
1810, the telephone card list address 181 1 . and the use 
list address 1812 respectively represent the first 
addresses of the areas in which are stored personal 
information 1706, portrait image data 1707, a user pub- 
lic key certificate 1708. user preference informatfon 
1709. telephony information 1710, a credit card list 
1 71 1 , a tk:ket list 1 7 1 2. a payment card list 1 71 3. a tele- 
phone card list 1714. and a use fist 1715. 
[0865] The telephony information 1710 consists of 
three types of information: a last called number 1813, 
an address book address 1814. and a shortcut file 
address 1815. The last called number 1813 represents 
a telephone number employed for a prior call, and is 
employed when re-dialing a digital wireless telephone. 
The address book address 1814 and the shortcut file 
address 1815 respectively represent addresses in the 
object data area at which address book informatfon and 
a shortcut file are stored. 

[0866] The credit card list 1 71 1 includes list informa- 
tfon for credit cards that are registered by a user. In the 
CTedit card 1^ 1711. seven types of information are 
entered for each credit card: a aedrt card name 1816, a 
aedit card numb^ 1817, an effective period 1818, a 
aedit card status 1819. an image data address 1820, 
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an object data address 1821 . andan access time 1822. 
[0867] The aedrt card status 1819 indicates whether 
or not the credit card is effective, and also the credit 
limit, while the image data address 1820 represents an 
address in the object data area 1716 at which image s 
data for the credit card are stored. The object data 
address 1821 represents an address at which are 
stored object data for a program for the credit card, and 
the access time 1822 represents the last time that the 
user employed the credit card. io 
[0868] At the ot)ject data address 1821 is stored a 
local address that is an address in the object data area 
1 716, or a remote address that Is an address in the user 
information server 902 of the service providing system 
1 10. When a remote address is stored at the object data is 
address 1821 , and when the user selects a correspond* 
ing credit card, the mobile user terminal 100 downloads 
object data from the service providing system 11 0 to the 
tenrporary area 1704 (remote access), and executes a 
program for the credit card. In order to simply display so 
the aedit card, the image data at the image data 
address 1820 in the object data area 1716 are dis- 
played, and object data are not downloaded. 
[0869] An address to be stored at the object data 
address 1821 is determined by the service providing 2s 
system 110. In the data updating process, the access 
times for the individual aedit cards are compared, and 
a local address is assigned for the credit card having the 
latest access time. When there is adequate space in the 
object data area 1 716. the object data addresses of ail 3o 
the credit cards can be focal addresses. 
[0870] The list information for the electronic tickets 
owned by the user is stored in the ticket list area 1712. 
In the ticket list area 1712 are stored five types of infor- 
mation: ticket name information 1823. ticket ID informa- 35 
tion 1824. ticket status information 1825. electronic 
ticket address information 1826. and access time infor- 
mation 1827. 

[0871] The ticket name 1823 and the ticket ID 1824 
represent the name and the ID of an electronic ticket. 4o 
The ticket status 1825 represents the state of an elec- 
tronic ticket, concerning whether it can be employed or 
whether it has been examined. The electronic ticket 
address 1826 represents an address at which an elec- 
tronic ticket is stored. And the access time 1827 is the 4S 
time at which the user last accessed the electronic 
ticket. 

[0872] The list information tor electrortic payment 
cards owned by the user is stored in the payment card 
list area 1713. In the payment card list area 1713 are so 
stored six types of information: card name information 
1828, card ID Information 1829. card status information 
1830. remaining card amount information 1831. elec- 
tronic payment card address information 1832, and 
access time information 1833. ss 
[0873] The card name 1 828 and the card ID 1829 rep- 
resent the name and the ID of an electronic payment 
card. The card status 1830 represents the state of an 


electronic. payment card, concerning whether it can be 
employed or whether its credit is exhausted. The 
remaining card amount 1831 represents the remaining 
amount that Is held by an electronic payment card. The 
electronic payment, card address 1832 represents an 
address at which an electronic payment card is stored. 
And the access time 1832 is the time at whfoh the user 
last accessed the electronic payment card. 
[0874] The list information tor electronic telephone 
cards owned by the user is stored in the telephone card 
list area 1714. In the telephone card list area 1714 are 
stored six types of information: card name information 
1834, card ID information 1835. card status information 

1836. remaining card amount information 1837, elec- 
tronic telephone card address informatfon 1838, and 
access time information 1840. 

[0875] The card name 1 834 and the card ID 1 835 rep- 
resent the name and the ID of an electronic telephone 
card. The card status 1836 represents the state of an 
electronfo telephone card, concerning whether it can be 
employed or whether its credit is exhausted. The 
remaining card amount 1837 represents the remaining 
amount that is held by the electronic telephone card. 
The electronic telephone card address 1838 represents 
an address at which an electronic telephone card is 
stored. And the access time 1839 is the time at which 
the user last accessed the electronic telephone card. 
[0876] A local address incficating an address in the 
object data area 1716, or a remote address indicating 
an address in the user Information server 902 of tfie 
service providing system 1 10, is stored at the electronic 
ticket address 1826, the electronic payment card 
address 1832 and the electronic telephone card 
address 1838. 

[0877] When a remote address is stored at tiie elec- 
ti^ontc ticket address 1826. and when the user accesses 
tiie electronic ticket, the mobile user temriinal 100 down- 
loads object data from the service providing system 1 1 0 
to the temporary area 1704 (remote access) and dis- 
plays the data on the LCD 303. SMIarty. when a remote 
address is stored at tiie electronic payment card 
address 1832 or the electronic telephone card address 

1837, and when tiie user accesses the electronic pay- 
ment card or the telephone card, tiie mobile user termi- 
nal 100 downloads object data from the service 
providing system 110 to the temporary area 1704 
(remote access), and displays the data on the LCD 303. 
[0878] Addresses to be stored at the electronic ticket 
address 1826, the electronic payment card address 
1832 and the electronic telephone card address 1838 
are determined by the service providing system 110. In 
ttie data updating process, tiie access times are com- 
pared and a local address is assigned for the electronk; 
ticket, the electronic payment card and the electronk; 
telephone card having the latest access times. When 
tiiere is adequate space available in the object data 
area 1716, tiie object data addresses of alt the credit 
cards can k>e local addresses. 
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[0879] In the use list 1715. four types of Information 
are stored for one mobile electronic commerce service: 
request number Information 1840, service code infor- 
mation 1841, use time information 1842. and use infor- 
mation address information 1843. The request number 5 
1840 uniquely represents (as regards the user) the 
mobile electronic commerce service provided for the 
user The service code 1841 is a code number that indi- 
cates the type of sen^ice that is provided. The use time 
1842 is the time at which the mobile electronic com- 10 
merce service is provided. And the use information 
address 1843 is an address at which a receipt, or infor- 
mation indicating the contents of the use, is stored. 
[0880] At the use information address 1843 is stored 
a local address, which is an address in the object data is 
area 1716. or a remote address, which is an address in 
the user information server 902 of the service providing 
system 110. When a remote address is stored at the 
use infomiation address 1843, and when the user 
accesses the use information, the nx>bile user terminal 20 
100 downloads the use information from the service 
providing system 110 to the temporary area 1704 and 
displays it on the LCD 303. 

[0881] The address stored at the use infomrtation 
address 1843 is also determined by the service provid- 2s 
ing system. In the data updating process, the use times 
for the individual use information items are compared, 
and a local address is assigned for the use infbmnatton 
having the latest use time. When there is adequate 
space available in the object data area 1 71 6, all the use 30 
infomiation addresses can be local addresses. 
[0882] An explanation will now be given for the data 
structures of an electronic ticket, an electronic payment 
card and an electronic telephone card. 
[0883] Fig. 19 is a specific c£agram showing the data 35 
structure of an electronic ticket 1900. In Fig. 19, the 
electronic ticket 1900 consists of three portions: a ticket 
program 1901, a presentation ticket 1902 and a ticket 
certiftcate 1903 or 1933 portion. The ticket program 
1901 portion is information for managing the status of a 4C 
ticket and for specifying an operation inherent to a ticket. 
The presentation ticket 1902 portion is information that 
is to be presented to the gate terminal 101 as informa- 
tion for the contents of a ticket for the examination of an 
electronic ticket. The ticket certificate is issued by a ^ 
service provider for an ^ectronic ticket, and indicates 
that the electronic ticket is authentic. There are two 
types of ticket certificates: a ticket certificate 1903 for 
simply certifying an electronic ticket and a registered 
ticket certificate 1933 for certifying that an electronic so 
ticket is registered in the service providing system. The 
ticket certificate 1903 can be changed to the registered 
ticket certificate 1 933 when the user registers an elec- 
tronic ticket. 

[0884] One electronic ticket includes three key types ss 
and four different keys in accordance with the public key 
cryptography method. One key type is a key used for a 
digitEil signature accompanying an electronic ticket and 


a ticket signature private key 1910 arid a ticket signature 
public key 1925 (1936) are provided as a private key 
and a conesponding public key Another key type is a 
ticket private key 1911 used for the electronic ticket 
authorization process performed with the gate terminal 
101 . The other key type is a gate public key 1912 used 
for the authorization process for the gate terminal 101 
performed by the mobile user terminal 100. 
[0885] The ticket signature private key 1910 and the 
ticket signature public key 1925 (1936) are a key pair 
that differs for each electronic ticket The ticket private 
key 1911 and the gate public key 1912 differ for each 
ticket type. The gate terminal 101 includes a ticket pub- 
lic key arxJ a gate private key that correspond to the 
ticket private key 1911 and the gate public key 1912. 
The method for employing these keys will be descrbed 
in detail later. 

[0886] In Fig. 19. first, the ticket program 1901 
includes ten items of information: tk:ket program header 
1904, ticket name 1905. ticket ID 1906, ticket status 
1907, variable ticket information 1908. ticket examina- 
tion number 1909. ticket signature private key 1910, 
tkicet private key 191 1. gate public key 1912 and tcket 
program data 1913 information. 
[0887] The ticket program header 1904 is header 
information indicating that the entry is a ticket program 
arxJ desaibing the data structure of the ticket program. 
The ticket name 1905 and the ticket ID 1906 are the 
name and the ID of an electronic ticket. The ticket ID is 
klentrfication information that differs for each electronic 
ticket. 

[0888] The ticket status 1 907 is infonnation describing 
the status of an electronic ticket, concerning whether 
the electronic ticket can be used, whether it has been 
examined, whether it has been registered, and wh^her 
it can be transfen-ed. 

[0889] The variable ticket infamation 1 908 is variable 
information that is optionally set in accordance with the 
electronic ticket type. 

[0890] The ticket examinatfon number 1909 is a 
number indicating the order for the ticket examination 
process, and is incremented each time the ticket exam- 
ination process is performed. For each electronic ticket, 
an arbitrary numt>er is set as the initial amount for the 
ticket examination number. The initial amount is man- 
aged by the service providing system 110, and is 
enployed as verification data in the ticket reference 
process. The ticket reference process will be descried 
in detail later. 

[0891 ] The ticket signature private key 1 91 0 is a digital 
signature private key for the electronic ticket 1900. Sim- 
ilariy. the ticket private key 191 1 is used for the authori- 
zation process for the electronic ticket 1900, and the 
gate putslic key is used for the authorization process for 
the gate terminal. 

[0892] The ikke^ signature private key 1910 is used, 
in the ticket examination process and the ticket transfer 
process, to provide a digital signature for data consist- 
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ing of the ticket status 1 907 and the variable ticket infor- 
mation 1908 for the electronic tk:ket 1900 in the gate 
terminal 101 or the mobile user terminal to which the 
electronic ticket is transferred. 

[0893] The ticket program data 1913 is a program s 
module for specifying an operation inherent to the elec- 
tronic ticket. Various types of tickets are specified by a 
combination of the ticket program data 1913 and the 
variable ticket information 1908. 

[0894] The program module for specifying a comnron io 
operation for the electronic ticket is stored in the ROM 
1501. The basic operations, such as the exchange of 
messages with the gate terminal to examine an elec- 
tronic ticket, the generation of messages to be 
exchanged and the setting of the ticket status 1907 to is 
be "examined," and the standard format for the display 
of an electronic ticket on the LCD 303. are defined by 
the program nxxJule that is stored in the ROM 1501 . 
[0895] The ticket prof^am data 1913 is a program 
module for specifying the operatbns inherent to the 2o 
ticket examinatk)n process and inherent to the display 
process. The ticket program data 1 91 3 consists of three 
data sets: a transaction nxxiule set 1930, a representa- 
tion module set 1931 and a representative conponent 
information set 1 932. 2S 
[0896] The transaction module 1930 is a program 
module for specifying the operation inherent to a tk:ket 
in the ticket examinatk)n process. Various operations In 
the ticket examination process can be defined by a com- 
bination of the variable tk:ket information 1908 and the 30 
ticket information 1917. 

[0897] For example, to define an electronk; tkicet that 
is equivalent to five coupon tk:kets. a program module 
such as the transaction module 1930 is specified, 
whereby an amount of "5," which corresponds to the 35 
number of coupon tickets, Is set for the variable ticket 
information 1908, whereby, at each examination, the 
number of coipon tickets in the variable ticket informa- 
tion is decremented, and whereby, when the number of 
coupon tickets reaches "0," the ticket status 1907 is 4o 
changed to "disabled." 

[0898] Further, to specify an electronic ticket that 
serves as a ticket that is valid for tiiree days from tiie 
time it is first examined, a program module is defined as 
the transaction nrKxJule 1930, whereby, when the ticket 45 
is first examined, the date of the third day is set in the 
variable ticket information 1908 as tiie effective limit, 
and whereby the effective limit set in the variable ticket 
information is examined during each examination. 
[0899] The transactwn module 1 930 does not have to so 
be specified if this is not required. When tiie transaction 
module 1930 is not defined, it acts as an electronic 
ticket for the performance of the bask; ticket examina- 
tion process. 

[0900] The representatk>n module 1931 is a program ss 
module for specifying an operation on tiie display, such 
as a location on the LCD 303. data to be displayed and 
a display form. For example, for the above electronic 


ticket that serves as a coupon ticket, the location 
whereat tiie number of remaining coupon tickets (a 
amount set in tiie variable ticket information) is dis- 
played is designated by the representation module 
1931. 

[0901 ] The representation module 1 931 also does not 
have to be defined if such is not necessary When tiie 
representation module 1931 is not defined, an elec- 
tronic ticket is displayed in the standard display format. 
[0902] The representative component information 
1932 is image infomiation comprising a conponent of a 
ticket on the display, such as an illustation, a photo, a 
map or a background image. The representative com- 
ponent information 1932 does not have to be specified if 
such is not necessary. When the representative conpo- 
nent information 1932 is not specified, the electronk; 
ticket is displayed using only with text information, as is 
shown in Fig. 3C. When the representative component 
information 1932 is specified, the electronic ticket is dis- 
played using tiie standard display format. When the rep- 
resentation module 1931 is specified, the image 
information included in tiie representative component 
information is displayed as an image 313 in accordance 
witii the representation module 1931, as is shown in 
Fig. 3F 

[0903] The operatfons attributat>le to various types of 
tickets, and the design of an etecti'onic ticket having a 
high degree of freedom can t>e specified by a combina- 
tion consisting of the transaction module 1930. the rep- 
resentation module 1931 and the representative 
component information 1932. 

[0904] The presentation ticket 1902 includes eight 
irrformatbn items: a presentation tkrket header 1914, a 
ticket code 1915. a ticket ID 1916, ticket information 
1917, a ticket issuer ID 1918. a validity term 1920. a 
service provider ID 1921 , and a ticket issuing date 1922. 
A digital signature is provided for tiie ticket ID 1916, tiie 
ticket information 191 7 and the ticket issuer ID 1918 by 
the ticket issuer (1919). and a digital signature is pro- 
vided for the presentation ticket 1 902 by the service pro- 
vkJer. 

[0905] The presentation ticket header 1914 is header 
informatfon indicating tiiat tiie pertinent ticket is a pres- 
entation ticket and indicating the data sb-ucture of tiie 
presentation ticket. The ticket code 1915 is code infor- 
mation indicating an electi-onic ticket type. And the ticket 
ID 1916 is ID information for an electrons ticket, and is 
tiie same information as that given for the ticket ID 
1906. 

[0906] The ticket information 1917 is ASCII (American 
Standard Code for Information Interchange) information 
that indicates tiie contents of a ticket. In the ticket infor- 
mation 1917, a tk:ket trtie. a date, a place, a seating 
dass. a sponsor, information as to whether an elec- 
tronic ticket can be transferred, and usage condition 
information, such as the numtier of coupon tickets when 
tiie elecb'onk; ticket is used as a coupon ticket are 
described using a form to whrch tag information are 


77 


153 


EP0950 968A1 


154 


added to represent, the indivkiual information types. 
When the standard display famat or the representation 
module 1931 is designated, the ticket information 1917 
is displayed on the LCD 303 in accordance with the rep- 
resentation module 1931 , as is shown in Fig. 3C or 3F s 
[0907] The ticket issuer ID 1918 is ID information that 
identifies the ticket issuer who issued the pertinent 
tk:ket The validity term 1920 is information concerning 
the period the electronic ticket 1900 is valkl. The service 
provider ID 1921 is ID information for the service pro- io 
vkjer. And the ticket issuing date 1922 is infomnatton 
concerning the date on which the service provider 
issued the electronic tk:ket 1900. 
[0908] The ticket certificate 1903 and the registered 
ticket certificate 1933 have substantially the same data is 
structure. 

[0909] The ticket certificate 1 903 includes seven infor- 
mation items: a ticket certificate header 1923. a tktet ID 
1924. a trcket signature public key 1925, a ticket certifi- 
cate ID 1926. a certificate validity term 1927. a service 20 
provider ID 1928. and a ticket certifk;ate issuing date 
1929. A digital signature is provkied for tiie ticket certif- 
icate 1903 by the service provider. 
[0910] The ticket certificate header 1923 is header 
infbnnation labeling tilts as a ticket certificate and 25 
describing tiie data structure of the ticket certificate. 
The ticket ID 1924 Is ID information for the electronic 
ticket 1900. and is the same information as that pro- 
vkied by tiie ticket ID 1906 and the ticket ID 1916. 
[091 1 ] The ticket signature put)lic key 1 925 is a public 30 
key tiiat is paired with the ticket signature private key 
1910 for use as the digital signature for the electronic 
tktot 1900. The ticket certificate ID 1926 is ID informa- 
tkin for the ticket certificate 1903. The certificate validity 
term 1927 is information indk:ating the perkxi during 35 
which the ticket certificate 1903 is valid. The service 
provkier ID 1928 is ID information for identifying tiie 
service provider who issued the ticket certifk:ate 1903. 
The ticket certifk^ate issuing date 1929 is information 
provkJing the date on which the ticket certificate 1903 40 
was issued. 

[0912] The registered ticket certificate 1933 includes 
seven infomnation items: a registered ticket certificate 
header 1934, a tk:ket ID 1935. a ticket signature public 
key 1936, a ticket certificate ID 1937, a certificate valid- 45 
ity term 1938. a service provider ID 1939, and a ticket 
certificate issuing date 1940. A digital signature is pro- 
vkied for tiie ticket certificate 1933 by tiie service pro- 
vider. 

[091 3] The registered ticket certificate header 1 934 is so 
header information labeling tiiis as a registered ticket 
certificate and describing tiie data structure of tiie regis- 
tered ticket certificate The ticket ID 1935 Is ID informa- 
Xion for tiie electronic ticket 1900. and is the same 
tnfomiation as that provided by tiie ticket ID 1906 and ss 
the ticket ID 1916. 

[091 4] The ticket signature public key 1 936 is a public 
key that is paired witii tiie ticket signature private key 


1910 for use as the digital signature for the etectronic 
ticket 1 900. The paired ticket signature private key 1910 
and ticket signature pdtiiic key 1936 have greater 
lengths and provkie greater security than do the paired 
ticket signature private key 1910 and ticket signature 
public key 1925. 

[0915] In tiie ticket registration process, the paired 
ticket signature private key 1910 and ticket signature 
public key 1925 used as tiie digital signature for tiie 
electronic ticket are updated to the new. more secure 
paired ticket signature private key 1910 and tk:ket signa- 
tijre public key 1936. 

[0916] The ticket certificate ID 1937 is ID information 
for the registered ticket certifk:ate 1933. The certificate 
validity term 1938 is information concerning the term 
during which the registered ticket certifk:ate 1933 is 
valid. The service provkier ID 1939 is ID information 
kJentifying the servk^e provkier who issued the regis- 
tered ticket certificate 1 933. The ticket certif k:ate issuing 
date 1940 is information concerning the date on which 
tiie registered ticket certificate 1933 was issued. 
[0917] The ticket certif cate does not constitute infor- 
mation for certifying tiie electronic ticket 1900, but 
instead constitutes information with which the service 
prcvkler certifies the ticket signature public key 1925 (or 
the ticket signature public key 1936). The ticket certifi- 
cate is added to the message accompanied by the dig- 
ital signature for which tiie ticket signature private key 
1910 is used, so that the legality of the message can be 
verified. 

[0918] When the eteOronic ticket is purchased or 
transferred, the tk:ket status 1907 for the electronic 
ticket is in tiie disabled state. To set the ticket status 
1907 to the enabled state, the electronic tki^et must be 
registered in the service providing system 1 10. 
[0919] When the service provding system 110 sepa- 
rately manages an electi-onic ticket to be used and an 
electronic ticket that is unused and is in tiie sleeping 
state, the operating cost of tiie electitxiic ticket service 
is reduced, and the illegal use of the electronic ticket is 
prevented by changing, during tiie registration process, 
tiie digital signature keys for the electi^onic ticket. 
[0920] When the electronic ticket is registered, the 
ticket status 1907 represents the enabled state. The 
ticket signature private key 1910 is changed to a new 
ticket signature private key, and accordingly, the ticket 
certificate 1903 is changed to the registered ticket cer- 
tificate 1933. Further, in the service providing system 
110. the etecti'onic ticket is registered in the service 
director information server 901 as an electronic ticket 
tiiat is to be used by tiie user who registered the ticket. 
[0921] Fig. 20 is a specific diagram showing tiie data 
structure of an electronk: payment card 2000. In Fig. 20, 
the electronk: payment card 2000 consists of three por* 
tions: a payment card program 2001. a presentation 
card 2002 and a card certificate 2003 or 2033 portion. 
The payment card program portion is information for 
managing tiie status of a payment card and for specify- 
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ing an operation inherent to a payment card. The pres- 
entation card portion is information that is to be 
presented to the merchant terminal 102 (or the mer- 
chant terminal 103 or the automatic vending machine 
104) as information for the contents of a payment card 5 
for the settlement of a payment using an electronic pay- 
ment card. The card certificate is issued by a service 
provider for an electronic payment card, and indicates 
that the electronic payment card is authentic. TTiere are 
two types of card certificates: a card certificate 2003 for w 
sinrply certifying an electronic payment card, and a reg- 
istered card certificate 2033 for certifying that an elec- 
tronic payment card is registered in the service 
providing systOT. The card certificate 2003 can be 
changed to the regstered card certificate 2033 when 15 
the user registers an electronic payment card. 
[0922] One electronic payment card, as well as one 
electronic ticket, includes three key types and four differ- 
ent keys in accordance with the public key ayptography 
method. One key type is a key used for a cfigital sigia- 20 
ture accompanying an ^ectronk; payment card, and a 
card signature private key 2010 and a card signature 
public key 2025 (2036) are provided as a private key 
and a coaesponding publk; key. Another key type is a 
card private key 201 1 used for the electronic payment ss 
card authaization process performed with the merchant 
tenminal 102 (or the merchant terminal 103 or the auto- 
matic vending machine 104). The other key type is an 
accounting machine public key 2012 used fa the 
authorization process for the merchant tenninal 102 (or 30 
the merchant terminal 103 or the automatic vending 
machine 104) performed by the mobile user tenninal 
100. 

[0923] The card signature private key 2010 and the 
card signature public key 2025 (2036) are a key pair that 35 
differs for each electronic payment card. The card pri- 
vate key 2011 and the accounting machine public key 
2012 differ for each payment card type. The merchant 
tenninal 102 (or the merchant terminal 103 or the auto- 
matic vending machine 104) includes a card public key 40 
and an accounting machine private key that correspond 
to the card private key 2011 and the accounting 
machine pii>lic key 2012. The method for emptoying 
these keys will be described in detail later. 
[0924] In Fig. 20, first the payment card program 2001 4S 
includes ten items of informatk>n: payment cand pro- 
gram header 2004, card name 2005, card ID 2006. card 
status 2007, total remaining value 2008, micro-check 
issuing number 2009. card signature private key 2010. 
card private key 2011, accounting machine public key so 
2012 and payment card program data 2013 information. 
[0925] The card program header 2004 is header infor- 
mation indicating that the entry is a payment card pro- 
gram and desaibing the data structure of the payment 
card program. The card name 2005 and the card ID ss 
2006 are the name and the ID of an electronic payment 
card. The card ID is identificatwn infbrmatk)n that differs 
for each electronic payment card. 


[0926] The card status 2007 is information descrft3ing 
the status of an electronic paymem card, concerning 
whether the electronic payment card can be used, 
whether it is unused, whether it has been registered, 
and whether it can be transferred. 
[0927] A remair^ng card amount 2008 is informaton 
providing the remaining amount that is held by the elec- 
tronic payment card. 

[0928] The micro-check issuing number 2009 is the 
issue nunf)ber for a micro-check that is issued by an 
electronic payment card, and is incremented each time 
a miao-check is issued. For each electronic payment 
card, an art)itrary number is set as the initial number 
that is enrployed as the micro-check issue nurriaer. The 
initial number is managed by the service providing sys- 
tem 110, arxl is employed as verification data in the 
micro-cfieck reference process. The micro-check refer- 
ence process will be described in detail later. 
[0929] The card signature private key 201 0 is a digital 
signature private key for the electronk: payment card 
2000. Similarly, the card private key 201 1 is used for the 
authorization process for the electronic payment card 
2000, and the accounting machine public key 2012 is 
used for the authorization process for the merchant 102 
(or the merchant 103 or the accounting machine 104). 
[P930] The card signature private key 201 0 is used, in 
the payment card clearing process and the payment 
card transfer process, to provide a digital signature for 
data consisting of the card status 2007 and the total 
remaining value 2008 for the electronic payment card 
2000 in the merchant terminal 102 (or the merchant 103 
or the automata vending machine 104) or the mobile 
user terminal to which the electronic payment card is 
transferred. 

[0931 ] The card program data 20 1 3 is a program mod- 
ule for specifying an operation inherent to the electronic 
payment card, 

[0932] The program module for specifying a common 
operation for the electronic payment card is stored in the 
FOM 1501. The basic operations, such as the 
exchange of messages with the merchant terminal 102 
(or the merchant terminal 103 or the automatic vending 
machine 104) to clear a micro-checK the generation of 
messages to t>e exchanged and the updating of the 
card status 2007, and the standard format for the dis- 
play of an electronic payment card on the LCD 303. are 
defined by the program module that is stored in the 
ROM 1501. 

[0933] The card program data 20 1 3 is a program mo6- 
ule for specifying the operations inherent to the payment 
card clearing process and inherent to the display proc- 
ess. The card program data 2013 consists of three data 
sets: a transaction module set 2030. a representation 
module set 2031 and a representative component infor- 
mation set 2032. 

[0934] The transaction module 2030 is a program 
nnodule for specifying an operation inherent to the pay- 
ment card settlement processing. Since the transaction 
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module 2030 is specified, in the payment card settle- 
ment processing, messages can be exchanged among 
the procedures that differ from normal, or inherent infor- 
mation can be included in a message to be exchanged. 
[0935] The transaction module 2030 does not have to s 
be specified if this is not required. When the transaction 
module 2030 is not defined, it acts as an electronic pay- 
ment card tor the performance of the basic payment 
card clearing process. 

[0936] The representation module 2031 is a program io 
module for specifying an operation on the display, such 
as a location on the LCD 303. data to be cfisplayed and 
a display form. The representation module 2031 also 
does not have to be defined if such is not necessary. 
When the representation oKxlule 2031 is not defined, is 
an electronic payment card is displayed in the standard 
display format 

[0937] The representative conrponent infomnation 
2032 is image information comprising a component of a 
payment card on the cfisplay. such as an illustration, a 20 
photo, a map or a background image. The representa- 
tive component information 2032 does not have to be 
specified if such is not necessary. When the represent- 
ative component information 2032 is not specified, the 
electronic payment card is displayed using only with text 25 
information, as is shown in Fig. 3D. When the represent- 
ative component information 2032 is specified, the elec- 
tronic payment card is displayed using the standard 
display format. When the representation module 2031 is 
specified, the image information included in the repre- 30 
sentattve component information is displayed as an 
image 314 in accordance with the representation mod- 
ule 2031 , as is shown in Fig. 3G. 
[0938] The operations attritxitable to various types of 
payment cards, and the design of an electronic payment 35 
card having a high degree of freedom can t>e specified 
by a comt>ination consisting of the transaction module 
2030. the representation module 2031 and the repre- 
sentative component information 2032. 
[0939] The pres&itation card 2002 includes eight 40 
information items: a presentation card header 2014. a 
card code 2015. a card ID 2016. card information 2017. 
a payment card issuer ID 2018. a validity term 2020. a 
service provider ID 2021 . and a card issuing date 2022. 
A digital signature is provided for the card ID 2016. the 45 
card information 2017 and the card issuer ID 2018 by 
the card issuer (2019), and a digital signature is pro- 
vided for the presentation card 2002 by the service pro- 
vider. 

[0940] The presentation card header 2014 is header so 
infonnation indicating that the pertinent card is a pres- 
entation card and indicating the data structure of the 
presentation card. The card code 2015 is code informa- 
tion indicating an electronic payment card type. And the 
card ID 2016 is ID information for an electronic payment ss 
card, and is the same information as that given for the 
card ID 2006. 

[0941 ] The card infbmBtion 201 7 is ASCI I information 


that indicates the contents of a payment card. In the 
card information 2017. a face value of a payment card 
when it is issued, usage conditfon information, an 
issuer, and information as to whether an electronic pay- 
ment card can be transferred, are described using a 
form to which tag information are added to represent the 
individual infonnation types. When the standard display 
format or the representation nxxJule 2031 is desig- 
nated, the card information 2017 is displayed on the 
LCD 303 in accordance vnth the representation module 
2031. as is shown in Fig. 3D or 3G. 
[0942] The card issuer ID 2018 is ID information that 
identifies the payment card issuer who issued the perti- 
nent payment card. The validity term 2020 is informa- 
tion concerning the period the electronic payment card 
2000 is valid. The service provider ID 2021 is ID infor- 
mation for the service provider. And the payment card 
issuing date 2022 is information concerning the date on 
which the sendee provider issued the electronic pay- 
ment card 2000. 

[0943] The card certificate 2003 and the registered 
card certificate 2033 have substantially the same data 
structure. 

[0944] The card certificate 2003 includes seven infor- 
mation items: a card certificate header 2023, a card ID 
2024, a card signature public key 2025. a card certifi- 
cate ID 2026, a certificate validity term 2027. a service 
provider ID 2028. and a card certificate issuing date 
2029. A digital signature is provided for the card certifi- 
cate 2003 by the service provider. 
[0945] The card certificate header 2023 is header 
information labeling this as a card certificate and 
descritDing the data structure of the card certificate. The 
card ID 2024 is ID irrformation for the electronic pay- 
ment card 2000. and is the same information as that 
provided by the card ID 2006 and the card ID 2016. 
[0946] The card signature public key 2025 is a put)lic 
key that is pciired with the card signature private key 
2010 for use as the digital signature for the electronic 
payment card 2000. The card certificate ID 2026 is ID 
information for the card certificate 2003. The certificate 
validity term 2027 is information indicating the period 
during which the card certificate 2003 is valid. The serv- 
ice provider ID 2028 is ID information for identifying the 
service provider who issued the card certificate 2003. 
The card certificate issuing date 2029 is information 
providing the date on which the card certificate 2003 
was issued. 

[0947] The registered card certificate 2033 includes 
seven information items: a registered card certrftcate 
header 2034, a card ID 2035. a card signature public 
key 2036, a card certificate ID 2037. a certificate valkJrty 
term 2038. a service provider ID 2039. and a card cer- 
tificate issuing date 2040. A digital signature is provided 
for the registered card certificate 2033 by the service 
provider. 

[0948] The registered card certificate header 2034 is 
header information labeling this as a registered card 
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certificate and deserving the data structure of the regis* 
tered card certificate. The card ID 2035 is ID information 
tor the electronic payment card 2000. and is the same 
information as that provided by the card ID 2006 and the 
card ID 2016. . 5 
[0949] The card signature put}tic key 2036 is a put)lic 
key that is paired with the card signature private key 
2010 for use as the digital signature for the electronic 
payment card 2000. The paired card signature private 
key 2010 and card signature public key 2036 have io 
greater lengths and provide greater security than do the 
paired card signature private key 2010 and card signa- 
ture public key 2025. 

[0950] In the payment card registration process, the 
paired card signature private key 2010 and card signa- 75 
ture public key 2025 used as the digital signature for the 
electronic payment card are updated to the new, more 
secure paired card signature private key 2010 and card 
signature publk; key 2036. 

[0951] The card certifk»te ID 2037 is ID information 20 
for the registered card certificate 2033. The certifk»te 
valicfty term 2038 is information concerning the term 
during wNch the registered card certificate 2033 is 
valid. The service provider ID 2039 Is ID information 
identifying the service provider who issued the regis- 2s 
tered card certificate 2033. The card certificate issuing 
date 2040 is information concerning the date on whrch 
the registered card certif k:ate 2033 was issued. 
[0952] The card certificate does not constitute infor- 
mation for certifying the electronic payment card 2000, 30 
but instead constitutes informatton with which the serv- 
ice provider certifies the card signature public key 2025 
(or the card signature public key 2036). The card certif- 
icate is added to the nrticro-check accompanied by the 
digital signature for whk:h the card signature private key 35 
2010 is used, so thai the legality of the micro-check can 
be verified. 

[0953] When the electronic payment card is pur- 
chased or transferred, the card status 2007 for the elec- 
tronic payment card is in the disabled state. To set the 40 
card status 2007 to the enabled state, the electronic 
payment card must be registered in the service provid- 
ing system 110. 

[0954] When the service providing system 1 1 0 sepa- 
rately manages an electronic payment card to be used 4s 
and an electronic payment card ttiat is unused and is in 
the sleeping state, the operating cost of the electronic 
payment card service is reduced, and the illegal use of 
the electronic payment card is prevented by changing, 
during the registration process, the digital signature so 
keys for the electronic p^ment card. 
[0955] When the ^ectronic payment card is regis- 
tered, the card status 2007 represents the enak^led 
state. The card signature private key 2010 is changed to 
a nm card signature private key, and aooordingly. the 55 
card certificate 2003 is changed to the registered card 
certificate 2033. Further, in the servk^e provkling sys- 
tem 1 10, the electronic payment card is registered in the 


service director information server 901 as an electronic 
payment card that is to be used by the user who regis- 
tered the payment card. 

[0956] Fig. 21 is a specific diagram showing the data 
structure of an electronic telephone card 2100. In Fig. 
21. the electronic telephone card 2100 consists of three 
portions: a telephone card program, a presentation card 
and a card certificate portk)n. The telephone card pro- 
gram portion is inlbrmation for managing the status of a 
telephone card and for specifying an operation inherent 
to a telephone card. The presentation telephone card 
portion is information that is to be presented to the elec- 
tronic telephone card accounting machine 800 of the 
switching center 1 05 as information for the contents of a 
telephone card when a call is made using an electronic 
telephone card. The card certificate is issued by a serv- 
k;e provider for an electronic telephone card, and incfi- 
cates that the electronic telephone card is authentic. 
There are two types of card certifk^ates: a card certifi- 
cate 2103 for simply certifying an electronic telephone 
card, and a registered card certrfkate 2133 for certifying 
that an electronic telephone card is registered in the 
servk:e provkiing system. The card certifk:ate 2003 can 
be changed to the registered card certificate 2032 when 
the user registers an electronic payment card. 
[0957] One electronic telephone card, as well as one 
electronk; ticket or one electronk: payment card, 
includes three key types and four different keys in 
accordance with the public key cryptography method. 
One key type is a key used for a digital signature accom- 
panying an electronic telephone card, and a card signa* 
ture private key 21 10 and a card signature public key 
2125 (2136) are provided as a private key and a corre- 
sponding public key. Another key type is a card private 
key 21 1 1 used for the electronic telephone card author- 
ization process performed with the electronic telephone 
card accounting machine 800 of the switching center 
1 05. The other key type is an accounting macNne piMtc 
key 21 12 used for the authorization process for the elec- 
tronic telephone card accounting machine 800 per- 
formed by the mobile user terminal 100. 
[0958] The card signature private key 2110 and the 
card signature public key 2125 (2136) are a key pair that 
differs for each electronic telephone card. The card pri- 
vate key 21 1 1 and the accounting machine public key 
21 12 differ for each telephone card type. The electronk; 
telephone card accounting nmchine 800 of the switch- 
ing center 105 includes a card pii>lic key and an 
accounting n^chine private key that correspond to the 
card private key 21 1 1 and the accounting machine pub- 
lic key 2112. The method for enploying these keys will 
be described in detail later. 

[0959] In Fig. 21. first, the telephone card program 
2101 includes ten items of information: telephone card 
program header 2104, card name 2105, card ID 2106. 
card status 2107, total remaining value 2108. micro- 
check issuing number 2109. card signature private key 
2110, card private key 2111, accounting macNne publk; 
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key 21 12 and telephone card program data 21 13 infor- 
mation. 

[0960] The card program header 2 1 04 is header infor- 
mation indicating that the entry is a telephone card pro- 
gram and descrik>ing the data structure of the telephone s 
card program. The card name 2105 and the card ID 
2106 are the name and the ID of an electronic tele- 
phone card. The card ID is identification Information that 
differs for each electronic telephone card 
[0961] The card status 2107 is information describing io 
the status of an electronic telephone card, concerning 
whether the electronic telephone card can be used, 
whether it is unused, whether It has been registered, 
and whether it can be transferred. 

[0962] A remaining card amount 2108 is information is 
providtng the remaining amount that is held by the elec- 
tronic telephone card. 

[0963] The micro-check issuing number 2109 is the 
issue numb^- for a micro-check that is issued by an 
electronic telephone card, and is incremented each time 20 
a telephone micro-check is issued. For each electronic 
telephone card, an arbitrary number is set as the initial 
number that is employed as the miao-check issuing 
number. The initial number Is managed by the service 
providing system 110. and is employed as verification 25 
data in the miao-check reference process. The miao- 
check reference process will be de8aik>ed in detail later. 
[0964] The card signature private key 2 1 1 0 is a digital 
signature private key for the electronic telephone card 
2100. Similariy, the card private key 21 1 1 is used for the 30 
authorization process for the electronic telephone card 
2100. and the accounting machine public key 2112 is 
used fa the authaization process for the electronk; tel- 
ephone card accounting machine 800 of the switching 
center 105. 35 
[0965] The card signature private key 21 10 is used, in 
the telephone card clearing process and the telephone 
card transfer process, to provide a digital signature for 
data consisting of the card status 2107 and the total 
remaining value 2108 for the electronic telephone card 4C 
2100 in the electronic telephone card accounting 
nnachine 800 or the mobile user terminal to which the 
electronic telephone card is transferred. 
[0966] The telephone card program data 21 13 is a 
program module for specifying an operation inherent to 4$ 
the electronic telephone card. 
[0967] The program module tor specifying a common 
operation for the electronic telephone card is stored in 
the ROM 1501. The basic operations, such as the 
exchange of messages with the electronic telephone so 
card accounting machine 800 of the switching center 
105 to call a nrvao-checK the generation of messages 
to be exchanged and the updating of the card status 
2107, and the standard format fa the cfisplay of an elec- 
tronic telephone card on the LCD 303. are defined by 55 
the program nrKxiule that is stored in the ROM 1501 . 
[0968] The card program data 21 13 is a program mod- 
ule for specifying the operations inherent to the tele- 


phone card clearing process and inherent to the display 
process. The card program data 21 13 consists of three 
data sets: a transaction module set 2130, a representa- 
tfon module set 2131 and a representative component 
information set 2132. 

[0969] The transaction module 2130 is a program 
module for specifying an operation inherent to the tele- 
phone card settlement processing. Since the transac- 
tion nrxxJule 2130 is specified, in the telephone card 
settlement processing, messages can be exchanged 
among the procedures that differ from normal, or inher- 
ent information can be included in a message to be 
exchanged. 

[0970] The transaction module 2 1 30 does not have to 
be specified if this is not required. When the transactfon 
module 2130 is not defined, it acts as an electronic tele- 
phone card fa tiie performance of the basic telephone 
card clearing process. 

[0971] The representation module 2131 is a program 
nfKxiule for specifying an operatfon on tiie display, such 
as a locatfon on the LCD 303. data to be displayed and 
a display fam. The representation module 2131 also 
does not have to be defoied if such is not necessary 
When tiie representation module 2131 is not defined, 
an electronic telephone card is displayed in the stand- 
ard display famat. 

[0972] The representative component information 
2132 is image irrfamation comprising a conrponent of a 
telephone card on the display, such as an illustration, a 
photo, a map or a background image. The representa- 
tive component infamation 2132 does not have to be 
specified if such is not necessary. When the represent- 
ative component infamation 2132 is not specified, the 
electronic telephone card is displayed using only with 
text information, as is shown in Fig. 3E. When the repre- 
sentative component infamation 2132 is specified, the 
electronic telephone card is displayed using the stand- 
ard display famat. When the representation module 
2131 is specified, the image information included in tiie 
representative component information is displayed as 
an image 315 in accordance witii the representation 
OKXlule 2131, as is shown in Fig. 3H. 
[0973] The design of an electronic telephone card 
having a high degree of freedom can be specified by a 
combination consisting of the transaction module 2030. 
the representation module 2131 and the representative 
component infamation 2132. 
[0974] The presentation card 2102 Includes eight 
information items: a presentation card header 2114. a 
card code 21 15. a card ID 21 16. card infamation 21 17. 
a telephone card Issuer ID 21 18. a validity temri 2120. a 
service provider ID 2121 . and a card issuing date 2122. 
A digital signature is provided fa the card ID 2116. the 
card information 2117 and the card issuer ID 2118 by 
the card issuer (2119), and a digital signature is pro- 
vided for the presentation card 2102 by tiie service pro- 
vider. 

[0975] The presentation card header 21 14 is header 
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information indicating that the pertinent card is a pres- 
entatton card and indicating the data structure of the 
presentation card. The card code 21 1 5 is code informa- 
tion indicating an electronic telephone card type. Arxl 
the card ID 2116 is ID information for an electronic tele- 5 
phone card, and is the same information as that given 
for the card ID 2106. 

[0976] The card information 21 1 7 is ASCII information 
that indicates the contents of a telephone card. In the 
card information 21 1 7, a face value of a telephone card 10 
when it is issued, usage condition information, an 
issuer, and information as to whether an electronic tele- 
phone card can be transferred, are descrbed using a 
form to which tag irrfornation are added to represent the 
individual information types. When the standard display 15 
format or the representation module 2131 is desig- 
nated, the card information 2117 is displayed on the 
LCD 303 in accordance with the representation module 
2131 , as is shown in Fig. 3E or 3H. 
[0977] The card issuer ID 21 18 is ID information that so 
identifies the telephone card issuer who issued the per- 
tinent telephone card. The validity tenm 2 1 20 is informa- 
tion concerning the period the electnxiic telephone card 
2100 is valid. The service provider ID 2121 is ID infor- 
mation for the service provider. And the telephone card ss 
issuing date 2122 is information conceming the date on 
which the service provider issued the electronic tele- 
phone card 2100. 

[0978] The card certificate 2103 and the registered 
card certificate 2133 have substantially the same data 30 
structure. 

[0979] The card certificate 2103 includes se/en infor- 
mation items: a card certificate header 2123. a card ID 
2124. a card signature public key 2125, a card certifi- 
cate ID 2126. a certificate validity term 2127. a service 35 
provider ID 2128. and a card certificate issuing date 
2129. A digital signature is provided for the card certifi- 
cate 2103 by the service provider. 
[0980] The card certificate header 2123 is header 
information labeling this as a card certificate and 40 
desaibing the data structure of the card certificate. The 
card ID 2124 is ID information for the electronic tele- 
phone card 2100. and is the same information as that 
provided by the card ID 2106 and the card ID 2116. 
[0981] The card signature public key 2125 is a public 4S 
key that is paired with the card signature private key 
2110 for L^e as the digital signature for the electronic 
telephone card 2100. The card certificate ID 2126 is ID 
information for the card certificate 2103. The certificate 
validity terni 2127 is information indicating the period so 
during which the card certificate 2103 is valid. The serv- 
ice provider ID 2128 is ID information fa identifying the 
service provider who issued the card certificate 2103. 
The card certificate issuing date 2129 is information 
providing the date on which the card certificate 2103 55 
was issued. 

[0982] The registered card certificate 2133 includes 
seven information items: a registered card certificate 


header 2134, a card ID 2135, a card signature pii3lic 
key 21 36, a card certificate ID 2 1 37. a certificate validity 
term 2138. a service provider ID 2139, and a card cer- 
tificate issuing date 2140. A digital signature is provided 
lor the registered card certificate 2133 by the service 
provider. 

[0983] The registered card certificate header 2134 is 
header information labeling this as a registered card 
certificate and describing the data structure of the regis- 
tered card certificate. The card ID 2135 is ID information 
for the electronic telephone card 2100. and is the same 
information as that provided by the card ID 2 1 06 and the 
card ID 21 16. 

[0984] The card signature public key 2136 is a public 
key that is paired with the card signature private key 
2110 for use as tiie digital signature for the electronic 
telephone card 2100. The paired carrl signature private 
key 2110 and card signature publk; key 2136 have 
greater lengths and provide greater security than do the 
paired card signature private key 21 10 and card signa- 
ture pii)lic key 2125. 

[0985] In the telephone card registration process, the 
paired card signature private key 21 10 and card signa- 
ture public key 2125 used as the digital signature for the 
electronic telephone card are updated to the new, more 
secure paired card signature private key 21 10 and card 
signature public key 2136. 

[0986] The card certificate ID 2137 is ID information 
for the registered card certificate 2133. The certificate 
valkJity term 2138 is information concerning the term 
during which the registered card certificate 2133 is 
valid. The service provider ID 2139 is ID information 
identifying the service provider who issued the regis- 
tered card certificate 2133. The card certificate issuing 
date 2140 is information concerning the date on which 
the registered card certificate 2133 was issued. 
[0987] The card certificate does not constitute infor- 
mation for certifying the electronic telephone card 2000, 
but irtstead constitutes information with which tiie serv- 
rce provider certifies the card signatue public key 2125 
(or the card signature public key 2136). The card certif- 
icate is added to the telephone miao-check accompa- 
nied by the digital signature for which the card signature 
private key 2110 is used, so that the legality of the 
micro-check can be verified. 

[0988] When tiie electronic telephone card is pur- 
chased or transferred, tiie card status 2107 for the elec- 
tronic telephone card is in the disabled state. To set tiie 
card status 2107 to the enabled state, tiie electronic tel- 
ephone card must be registered in the service providing 
system 110. 

[0989] When the service providing system 110 sepa- 
rately manages ah electronic telephone card to be used 
and an electronic telephone card that is unused and is 
in the sleeping state, tiie operating cost of the electronic 
telephone card service is reduced, and the illegal use of 
tiie electronic telephone card is prevented by changing, 
during the registration process, the digital signature 
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ke/s for the electronic telephone card. 
[0990] When the electronic telephone card is regis- 
tered, the card status 2107 represents the enabled 
state. The card signature private key 21 10 is changed to 
a new card signature private key, and accordingly, the s 
card certificate 2103 is changed to the registered card 
certificate 2133. Further, in the service providing sys- 
tem 110. the electronic telephone card is registered in 
the service director infornration server 901 as an elec- 
tronic telephone card that is to be used by the user who io 
registered the telephone card. 
[0991] As is described above, the electronic ticket 
1900. the electronic payment card 2000 and the elec- 
tronic telephone card 2100 have similar data structures. 
Especially, the electronic payment card and the elec- is 
tronic tel^hone card have t>asically the same data 
structure, so that an electronic payment card that has 
the functions of both £in electronic payment card and an 
electronic telephone card can be Implemented. In this 
case, in the payment card settlement processing arxJ in 20 
the telephone card settlement processing, the price of a 
product and a corrvrujnication charge are subtracted 
from the remaining card amount hekJ by one electronic 
payment card. 

[0992] Further, when in1brmatk)n that corresponds to 25 
the remaining card amount 2008 hekl by the electronic 
payment card 2000 and the remaining card amount 
2108 held by the electronic telephone card 2100 is set 
as a part of the variable ticket Information 1908 provided 
for the electronic ticket 1900. a coupon ticket can be so 
implemented that functions as a ticket, a payment card 
and a telephone card. This is especially effective for a 
travel coupon ticket in which are packaged an overseas 
travel ticket, a shopping ticket and a portable telephone 
usage right. 35 
[0993] The internal structure of the gate terminal 101 
will now be described. 

[0994] Fig. 22 is a block diagram illustrating the 
arrangement of the gate terminal 1 01 . The gate terminal 
101 comprises: a CPU (Central Processing Unit) 2200. 40 
which processes data for transmission and reception, in 
accordance with a program stored in a ROM (Read 
Only Memory) 2201. and which controls the other com- 
ponents via a bus 2242; a RAM (Random Access Mem- 
ory) 2202 and a hard disk 2203 on which are stored 4S 
data that are to be processed and data that have been 
processed by the CPU 2200: a EEPROM (Electric Eras- 
able Progranmable Read Only Memory) 2204. in which 
are stored the gate ID of the gate terminal 101 . the ter- 
minal ID and a telephone number for a telephone termi- so 
nai, a merchant ID. a private key and a public key for the 
digital signature of a merchant, the service provider ID 
and the telephone nurTt>er of the servk;e providing sys- 
tem (the telephone number of the service provider is 
accompanied by the digital signature of the service pro- ss 
vkier). and the piislic key of the service provider: a cryp- 
tographk; processor 2205. which encrypts or decrypts 
data under the control of the CPU 2200; a data codec 


2206. which encodes data to be transmitted and 
decodes received data under the control of the CPU 
2200; a touch panel LCD 401. which displays an image 
set up by the CPU 2200, and detects touch manipula- 
tion effected by a merchant; an infrared communication 
module 400. which provides infrared communication 
with the mobile user terminal 100; a serial port 2209, 
which is connected to the infrared communication mod- 
ule 400: a serial-parallel converter 2208, which per- 
forms the bidirectional conversion of parallel data and 
serial data; a key operator 2212. which detects a mer- 
chant's manipulation of a lock switch 405. a menu 
switch 404. a number key switch 403 and a power 
switch 402; a k)udspeaker 221 1 . throu^ which sounds 
are output to provide notification concerning the com- 
pletion of the ticket examination process and the estab- 
lishment of the operation; a sound corrtroller 2210. 
which drives the loudspeaker 221 1; a digital telephone 
oomnujnication unit 2207. which provides digital tele- 
phone communication with the servrce providing system 
110 via the digital telephone communication line 120; 
an external irrterface 2213. which is an interface for the 
connection of an external device, such as a gate operv 
ing/ck>sing device; and a control logic unit 2214. which 
processes an interrupt signal received from the key 
operator 2212, the touch panel LCD 401 . the serial-par- 
allel converter 2208, the digital telephone communica- 
tion unit 2207 and the external irrterface 2213, and 
which serves as an interface when the CPU 2200 
accesses an internal register of the key operator 2213, 
the touch panel LCD 401 or the sound controller 2210. 
[0995] The cryptographic processor 2205 includes a 
secret key encryption and decryption functiCOT and a 
public key encryption and decryption function. The ayp- 
tographic processor 2205 employs a cryptography 
method determined by the CPU 2200 and the keys for 
the encrypting or decrypting of data set by the CPU 
2200. The CPU 2200 employs the encrypting and 
decrypting functions of the ayptographic processor 
2205 to perform a digital signature process or a closing 
process for a message, and to decrypt a closed and 
encrypted message or to verify a digital signature 
accompanying a message. A detailed explanation will 
be given later for the digital signature process, the clos- 
ing process, the decryption process and the digital sig- 
nature verrf ication process. 

[0996] The data codec 2206 encodes data to be trans- 
mitted or decodes received data under the control of the 
CPU 2200. In this case, the encoding is a process for 
the generation of data to be transmitted that includes 
communication control information and error correction 
information, and the decoding is a process for the per- 
formance of error correction for the received data and 
the removal of extra communication control information 
in order to obtain the data that a sender was to originally 
transmit. The data codec 2206 has a function for encod- 
ing or decoding data during data communication via a 
digital telephone, and a function for encoding or decod- 
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ing data during infrared oommunication. The data codec 
2206 performs encoding or decoding as determined by 
the CPU for data that are set by the CPU. 
[0997] When, for example, a closed message aocom- 
. panied by a digital signature is to be transmitted via dig- s 
ital telephone communication, the CPU 2200 employs 
the cryptographic processor 2205 to perform a digital 
signature process and a closing process for the mes- 
sage, employs the data codec 2206 to encode the 
obtained message to obtain a data communication form to 
fCM- a digital telephone, and transmits the resultant mes- 
sage through the control logic unit 221 4 to the digital tel- 
ephone commmication unit 2207. 
[0998] When a closed message accompanied by a 
digital signature Is to be received via digital telephone is 
communication, the CPU 2200 receives that message 
from the digital telephone communication unit 2207 
through the control logic unit 2214, enrpioys the data 
codec 2206 to decode the received message, and per- 
mits the ayptographic processor 2205 to decrypt the 20 
closed and encrypted message and to verify the digital 
Signature accompanying the message. 
[0999] Similarly, when a closed message accompa- 
nied by a digital signature is to be transmitted via infra- 
red oomnuinication, the CPU 2200 employs the 2s 
cryptographic processor 2205 to provide a digital signa- 
ture for the message and to close the message, and 
employs the data codec 2206 to encode the obtained 
message to provide a data form that is suitable for infra- 
red communication. Then, the resultant message is 30 
transmitted through the control logic unit 2214 to the 
serial-parallel converter 2208. 
[1000] When a closed message accompanied by a 
digital signature is to t>e received via infrared communi- 
cation, the CPU 2200 receives that message from the 35 
serial-parallel converter 2208 through the control logic 
unit 2214, employs the data codec 2206 to decode the 
received message, and permits the cryptographic proc- 
essa 2205 to deaypt the closed and encrypted mes- 
sage and to verify the digital signature accompanying 40 
the message. 

[1 001 ] When the merchant depresses either the lock 
switch 405, the menu switch 404, the number key switch 
403, or the power switch 402, the key operator 2212 
asserts, to the CPU 2200, an inten-upt signal 2237 45 
requesting the performance of a process corresponding 
to the manipulation of the switch. As is shown in Fig. 
23A, the key operata 2212 includes a key control regis- 
ter (KEYCTL) 2306 for setting the valid/invalid state of 
each SMtch. And to set the valid/invalid state of each so 
switch. The CPU 2200 accesses the key control register 
(KEYCTL) 2306. 

[1002] As is shown in Fig. 23A, the touch panel LCD 
401 includes an X coordinate register (XCOORD) 2304 
and a Y coordinate register (YCCX}RD) 2305, which 55 
correspond to the coordinates of the point on the screen 
that the merchant touches. When the merchant touches 
the screen, the touch panel LCD 401 asserts an inter- 


rupt signal 2235 requesting the performance of a proc- 
ess corresponding to the manipulation of a switch. In 
response to the interrupt, the CPU 2200 reads the coor- 
dinate information from the X coordinate register (XCO- 
ORD) 2304 and the Y coordinate register (YCOORD) 
2305 via the control logic unit 2214. and performs a 
process based on the coordinate information. 
[1003] The sound controller 2210, as is shown in Rg. 
23A, includes an audio processor control register 
(SCTL) 2303, for controlling the audio processing, that 
the CPU 2200 accesses To control the operation of the 
sound controller 2210. When, for example, the ticket 
examination process has been normally conpleted, the 
CPU 2200 accesses the audio processor control regis- 
ter (SCTL) 2303 to output a sound signalling that the 
ticket has been examined. Thus, the sound controller 
2210 drives the loudspeaker 2211, through which is out- 
put the sound signalling that the ticket has been exam- 
ined. 

[1004] The infrared communication module 400 mod- 
ulates a serial digital sigr^l that is received via the serial 
cable 406 to obtain a signal that is actually to fc>e trans- 
rrritted as an infrared ray. and further changes the result- 
ant signal to an infrared ray and emits it Furthermore, 
the infrared communication module 400 changes a 
received infrared ray to an analog signal, and then 
demodulates the analog signal to obtain a digital signal 
and outputs it. 

[1005] To transmK a message by using infrared com- 
munication, the CPU 2200 transmits the message as a 
digital signal 2226 to the serial i^arall el converter 2208 
via the control togic unit 2214. The serial-parallel con- 
verter 2208 converts the message into a serial digital 
signal, and transmits it via the serial port 2209 and the 
serial cable 406 to the infrared communication nxxjule 
400, which then outputs the infrared ray. 
[1006] When the infrared ray is received by the infra- 
red communication module 400, the serial digital signal 
received at the infrared communication module 4300 is 
transmitted via the serial cable 406 and the serial port 
2209 to the serial-parallel converter 2208, whereat the 
signal is converted into parallel data. At this time, the 
serial-parallel converter 2208 asserts the intenupt sig- 
nal 2227 and requests that the CPU 2200 process the 
received data. 

[1007] The digital telephone communication unit 2207 
controls digital telephone communication with the serv- 
ice providing system 1 10 via the digital telephone com- 
munication line 120. As is shown in Fig. 23A, the digital 
telephone communication unit 2207 includes an ID reg- 
ister (ID) 2307, in which the terminal ID of the gate ter- 
minal 101 is stored, and a digital telephone 
communication unit control register (TCTL) 2308, which 
controls the operation of the digital telephone communi- 
cation unit 2207. 

[1 008] The digital telephone communicatbn unit 2207 
converts data that are to be transmitted via digital tele- 
phone communication into a data format for digital tele- 
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• phone communication, and transmits the resuttant data 
to the digital telephone comnninicatton line 120. The 
data are transmitted to the control logic unit 2214 by the 
CPU 2200 as a digital signal 2223. 
[1009] In response to a call received along the digital 
telephone comnujnication line 1 20, the digital telephone 
convnunication unit 2207 exanrtines the tern^nal ID and 
receives and decodes the data. At this time, the digital 
telephone communication unit 2207 further asserts an 
interrupt signal 2224 rec^esting that the CPU 2200 
process the received data. 

[1010] The external interface 2213 is an interface cir- 
cuit for connecting an external device, such as a gate 
opening/ckjsing device. The CPU 2200 controls the 
exterr^l device via the control logic unit 2214 and the 
external interface 2213. A control signal 2245 is 
employed for the writing and reading operations per* 
formed by the CPU 2200 via the control logic unit 2214. 
At a low level the control signal signifies a writing oper- 
ation, while at a high level, the control signal signifies a 
reading operation. A data signal that is exchanged at 
this time by the control logic unit 2214 and the external 
interface 2213 is a digital signal 2243, and an intenrupt 
signal 2244 is a control signal that is issued as an inter- 
rupt request by the extemal device. 
[1 01 1 ] The control logic unit 221 4. as is shown in Fig. 
23A, includes three internal registers: a dock counter 
(CLOCKC) 2300. an update time register (UPTIME) 
2301, and an inten^ipt register (INT) 2302. 
[1 01 2] The dock counter is employed to measure the 
cun^ent time; the update time register is empk)yed to 
store the time at which the gate terminal 101 will com- 
municate with the service providing system to update 
data in the RAM 2202 and on the hard disk 2203; and 
the interrupt register is employed to indicate the reason 
an intemipt is generated for the CPU 2200. 
[1 01 3] When the count held by the dock counter 2300 
matches the count in the update time register 2301 . or 
when one of the tnteni^ signals 2224. 2227. 2235. 
2237 or 2244 is asserted, the contrd \oq\c unit 2214 
writes the reason for the interrupt in the interrupt regis- 
ter (INT) 2302, and asserts an interrupt signal 2222 
requesting the CPU perform an interoipt process. For 
the intenxpt processing, the CPU 2200 reads the rea- 
son stored in the interrupt register and then performs a 
oonresponding process. 

[1014] The individual bit fiekte of the interrupt register 
(INT) are defined as is shown in Fig. 23B. 
[101 5] Bit 31 represents the state of the power switch. 
When the bit value is 0. it indicates the state is the 
power-OFF state, and when the bit value is 1. it indi- 
cates the state is the power-ON state. 
[1 01 6] Bit 30 represents the digital telephone commu- 
nication state. When the bit value is 1. it indicates the 
state is one wherein digital telephone communication is 
in process. 

[1017] Bit 29 represents the generation of a touch 
panel inten-upt due to contact being made vvith the 


touch panel. When the bit value is 1, it indicates that 
touch panel interrupt has occurred. In this bit field, a 1 is 
set when the interrupt signal 2235 is asserted. 
[1 018] Bit 28 represents the generation of an infrared 

6 - ray reception interrtpt. When the bit value is 1, it indi- 
cates that an infrared ray has been received. In this bit 
field, a 1 is set when the infrared communication mod- 
ule 400 receives an infrared ray and the inten'upt signal 
2227 is asserted. 

10 [1019] Bit 27 represents the generation of a data 
reception interrupt When the bit value is 1 , it indicates 
that data is being received. In this bit field, a 1 is set 
when the data-communication data are received and 
the interrtpt signal 2224 is asserted during the course 

IS of digital telephone communication. 

[1020] Bit 26 represents the generation of an update 
interrupt requesting the performance of a data updating 
process. When the bit value is 1. it indicates the gener- 
ation of tfie update inten'upt. In this bit field, a 1 is set 

20 when the count in the clock counter matches the count 
in the update time register. 

[1 021 ] Bit 25 represents the generation of an external 
IF intenrupt requesting data communication be initiated 
with the external device that is connected to the external 

25 interface 2213. When the bit value is 1. it signals the 
generation of the external IF intenijpt. In this bitfield, a 
1 is set when the interrupt signal 2244 received from the 
external interface 2213 is asserted. 
[1022] Bit 24 represents the generation of a key inter- 

30 rupt by the manipulation of the switch. When the bit 
value is 1, it represents the generation of the key inter- 
rupt. In this bit f iekj, a 1 is set when the irrterrupt signal 
2237 is asserted. 

[1023] Bits 0 to 9 con-espond to switches 0 to 9 for the 
35 number key switches. Bit 10 and bit 11 correspond to 
number key switches and "#" and bits 1 2 to 1 5 corre- 
spond to function switches F1 to F4. Bits 16 to 18 
respectively correspond to the power switch, the lock 
switch, and the menu switch. When the bit value is 1, it 
40 indicates that a switch corresponding to that bit has 
been depressed. 

[1024] Data stored in the RAM 2202 will now be 
descrbed. 

[1025] Fig. 24 is a specific diagram showing a RAM 

45 map for data stored in the RAM 2202. 

[1026] The RAM 2202 is constituted by five areas: a 
fundamental program objects area 2400, a service data 
area 2401 , a merchant area 2402. a work area 2403. 
and a temporary area 2404. in the fundanr^ntai pro- 

50 gram objects area 2400 are stored an upgraded nxxJute 
for a program stored in the ROM 2201 . a patch program, 
and an additional program. The merchant area 2402 is 
an area that a merchant can freely use, the work area 
2403 is a work area that the CPU 100 employs when 

55 executing a program, and the temporary area 2404 is an 
area in which information received by the gate terminal 
is stored temporarily. 

[1027] The service data area 2401 is an area in which 
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is stored contract information for the electronic com- 
merce service, irrtonmation for an electronic ticket to be 
examined and history infornriation, and the data in this 
area are managed by the service providing system 1 10. 
The service data area 2401 is constituted by seven sub- 
areas: a data management inforn^tion area 2405, a 
merchant infamation area 2406, a merchant public Key 
certificate area 2407. a merchant preference area 2408, 
a ticket list area 2409, a transaction list area 2410 and 
an authorization report list area 241 1 . 
[1028] The data management irrformation area 2405 
is an area in which is held managen^ient information for 
data stored In the service data area 2401 ; the merchant 
informatbn area 2406 is an area in which is stored the 
name of a merchant and information concerning the 
contents of a contract entered into with the service pro- 
vider; the merchant's public key certificate area 2407 is 
an area in which is stored a public key certificate for the 
merchant; a n^chant preference area 2408 is an area 
in which is stored for a merchant preference information 
that concerns an electronic ticket service; the ticket list 
area 2409 is an area in which is stored list information 
for electronic tickets that the gate terminal examines: 
the transaction list area 2410 is an area in whk:h is 
stored history information for the ticket examination 
process of the electronic ticket service; and the authori- 
zation r^XMl list area 2411 is an area in which are 
stored results (reference results) obtained by querying 
the service providing system concerning an electronic 
ticket that is examined. 

[1 029] The information stored in the service data area 
2401 will now be descrit>ed in detail. 
[1030] Fig. 25 is a detailed, specific diagram showing 
the relationships established tor information stored in 
the service data area 2401 . 

[1031] The data management information 2405 con- 
sists of nine types of informatbn: a last data update 
date 2500. a next data update date 2501 , a terminal sta- 
tus 2502, a merchant information address 2503. a mer- 
chant public key certificate address 2504, a merchant 
preference address 2505, a ticket list address 2506, a 
transaction list address 2507 and an authorization 
report list address 2508. 

[1 032] The last data update date 2500 represents the 
date on which the service providing system 110 last 
updated the data in the RAM 2202 and on the hard disk 
2203, and the next data update date 2501 represents 
the date on which the service providing system 1 10 will 
next update the data In the sen^ice data area 2401 . The 
gate terminal 101 automatically initiates an update 
process when the time set according to the next data 
update date 2401 has been reached. 
[1 033] The time for the next data update date 2501 is 
set in the update time register 2301 . When the next data 
update date 2501 is reached, the gate terminal 101 ini- 
tiates the data updating process. During the data updat- 
ing process, the service providing system 1 10 updates 
data stored in the RAM and on the hard disk. This proc- 


ess is performed daily at a time (e.g., late at night) at 
which communication traffic is not very heavy. The data 
updating process will be descrbed in detail later. 
[1 034] The terminal status 2502 represents the status 

5 of the gate terminal. The merchant informatfon address 
2503. the merchant public k^ certificate address 2504, 
the merchant preference address 2505, the ticket list 
address 2506, the transaction list address 2507, and 
the authorization list address 2508 respectively repre- 

10 sent the first addresses for the areas in wNch are stored 
the merchant information 2406, the merchant public key 
certificate 2407, the merchant preference information 
2408, the ticket list 2409. the transaction list 2410. and 
the authorization list 241 1 . 

15 [1035] List information for electronic tickets that are to 
be examined by the gate terminal 101 is stored in the 
ticket list 2409. An electronic ticket to be examined by 
the gate terminal 101 is set up either by the service pro- 
vkiing system in the data updating process, or by the 

20 merchant downloading, from the service provkjing sys- 
tem, a program module (tick^ examination module) for 
examining an electronic ticket (ticket examination 
setup). This setup nDethod is determined in accordance 
with the contents of a contract entered into by the mer- 

25 chant arxl the service provkling system. 

[1036] Generally, when the usage form of the type of 
ticket to be examined at the gate terminal 101 must be 
frequentiy changed, for example, when, as at a stadimi, 
the ticket to be examined is changed every day, depend- 
so ing on the event, or when tiie changing of the ticket to be 
examined depends on ttie indivkjual gates (gate termi- 
nals), the merchant sets up the ticket to be examined. 
But when the type of ticket to be examined Is changed 
less frequently and, for example, when as at a theme 

35 park a ticket to be examined is determined for each 
attractfon, the service system providing system sets up 
the ticket to be examined. 

[1037] In the ticket list 2409, for one electronic ticket 
type seven types of information are stored: a ticket 

40 name 2509, a tkitet code 2510, a ticket issuer ID 251 1 , 
a validity term 2512, a gate private key 2513, a ticket 
public key 2514. and a tk:ket examination module 
address 2515. The ticket name 2509 is information that 
corrtains the name of an electronk; ticket to be examined 

45 by the gate terminal 101 ; the ticket code 2510 is code 
irrformation describing the type of the electronic ticket; 
and the validity term 2512 is the period the electronk; 
ticket is vaiki for use. The gate private key 2513 and the 
ticket public key 2514 are encryption keys that respec- 

50 tively are paired with the gate public key 1912 and the 
ticket private key 1 911 for the electronic ticket. 
[1 038] The ticket examination module address 251 5 is 
an address on the hard disk 2203 whereat is stored the 
ticket examinatfon module for the pertinent electronic 

55 ticket. 

[1039] In the transaction list 2410, list information is 
stored for managing the history of the ticket examination 
process of the electronic ticket service. For one ticket 
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examination process, four information items are stored 
in the transaction list 2410: a transaction number 2516. 
a service code 2517, a transaction time 2518, and a 
transaction information address 2519. 
[1040] The transaction number 2516 is a number 
uniquely identifying the ticket examination process 
(from the view of tiie merchant); the sen^ice code 2517 
is code information describing the type of mobile elec- 
tronic cormierce service that was provided for the user; 
and the transaction time 2518 is the time at which the 
ticket examirmtion process was performed. 
[1 (Ml ] The transaction information address 251 9 is an 
address at which is stored a ticket examination 
response 6703 that conresponds to the history informa- 
tion accuTUitated for the ticket examination process. In 
the transaction information address 2519 is stored a 
local address tiiat points to an address on the haid disk 
2203 a a remote address that points to indicates an 
address in the merchant informatk)n server 903 of the 
sendee providing system 110. When the remote 
address is stored at the transaction information address 

2519. and when the merchant accesses tiie history 
information, the gate terminal 101 downloads the his- 
tory information from tiie service provkling system to 
the temporary area and displays it on the LCD. 

[1 042] The address stored at the transaction infomia- 
tion address 2519 is determined by the service provid- 
ing system. In the data updating process, the 
transaction times for the history information items are 
compared, and a focal address is assigned for the his- 
tory information having the latest transactfon tinte. 
When there is adequate space on the hard disk 2203, 
all the transaction information addresses can t>e local 
addresses. 

[1043] A list of authorization report addresses 2520, 
which are addresses at which the results of ticket refer- 
ences are stored, is stored in the authorization report 
list 241 1 as list infonnation for managing the results of 
the ticket reference process. 

[1044] In the authorization report address 2520 is 
stored a focal address that points to an address on tiie 
hard disk 2203 or to a renK}te address tiiat points to an 
address in tiie merchant informatfon server 903 of the 
service providing system 110. When the remote 
address is stored at the authorizatfon report address 

2520, and when the merchant accesses the autiioriza- 
tion report the gate terminal 101 downloads the author- 
ization report from the service providing system to the 
temporary area, and displays it on the LCD. 

[1 045] The address stored at the authorization report 
address 2520 is determined by the service providing 
system. In the data updating process, the issue dates 
for the authorization reports are compared, and a local 
address is assigned for that information whfoh has the 
latest issue data When adequate space is £n/ailable on 
the hard disk 2203. all the authorization report 
addresses can be local addresses. 
[1046] The internal structure of the merchant terminal 


102 will now t>e e)q3lained. 

[1047] Fig. 26 is a block diagram iilusti^ating tiie 
an-angemenl of tiie merchant terminal 102. The mer- 
chant terminal 102 comprises: a CPU (Central Process- 
ing Unit) 2600. which processes data that is to be 
tiansmrtted and data that is received in accordance with 
a program stored in a ROM (Read Only Memory) 2601 
and which controls the other conponents via a bus 
2629; a RAM (Random Access Memory) 2602 and a 

10 hard disk 2603. whereat are stored data that are to be 
processed and data that have been processed by the 
CPU 2600; a EEPROM (Electric Erasable Programma- 
ble Read Only Memory) 2604. in which Is stored the 
accounting machine ID of the merchant terminal 102, 

IS the terminal ID and the telephone nuntier as a tele- 
phone terminal, a merchant ID. a private key and a pub- 
lic key for the digital signature of a merchant, the service 
provfoer ID, a telephone number of a service providing 
system (tiie telephone number of the service providing 

20 system is accompanied by tiie digital signature of a 
service provfoer), and tiie public key of the service pro- 
vider; an LCD controller 2605, which operates the LCD 
502 under the control of the CPU 2600 and which dis- 
plays on tiie LCD 502 an image set by the CPU 2600; a 

2S ayptogr^hic processor 2606, which enaypts or 
decrypts data under the control of the CPU 2600; a data 
codec 2607. whfoh encodes data to be transmitted and 
decodes data that is received under tiie control of the 
CPU 2600; an infrared communication module 501, 

30 which performs infrared communication with tiie mobile 
user terminal 100; a serial port 2609. which is con- 
nected to the infrared communication module 501; a 
serial-parallel converter 2608, which performs the bidi- 
rectional conversion of parallel data and serial data; a 

35 key operator 261 1 , which detects the manipulation off a 
mode ^tah 504 by a merchant, a hook switoh 505, a 
functfon switch 506, a number key switoh 507, an execu- 
tion switch 508 or a power switch 509; an audio proces- 
sor 2613. which drives a loudspeaker 2612 and tiie 

4C receiver of a telephone handset 503, and wfiich eurpli- 
f ies an analog audio signal 2444 received at the micro- 
phone of the telephone handset 503 and supplies tiie 
resultant signal to an audio codec 2614; the audio 
codec 2414, which encodes an analog audio signal 

46 2644 to provide digital audio data and decodes digital 
audio data to provide an analog audio signal 2643; a 
channel codec 2615, which multiplexes digital audio 
data and data-communication data in order to generate 
data to be transmitted, and which extracts digital audio 

so data and data-communication data from multiplexed 
data that are received; a digital communication ad^or 
2616. which is a communication adaptor employed with 
the digital comnmjnication telephone line 122; an RS- 
232C interface 2617. which is an interface circuit for the 

55 RS-232C cable 514 connected to the cash register 511; 
and a control fogic unit 2610, which processes an inter- 
rupt signal received from the key operator 2613, the 
channel codec or the RS-232C interface 2617, and 
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which serves as an interface when the CPU 2600 
accesses the internal register of the key operator 2613, 
the audio processor 2613. the audio codec 2614 or the 
channel codec. 

[1 048] The cryptographic processor 2606 includes a s 
secret key encryption and decryption function and a 
public key er^cryption and decryption function. The cryp- 
tographic processor 2606 employs a cryptography 
method determined by the CPU 2600 and the keys to 
encrypt or decrypt data selected by the C PU 2600. The io 
CPU 2600 enploys the encryption and decryption func- 
tions of the ayptographic processor 2606 to perform a 
digital signature process or a cbsing process for a mes- 
sage, and to decrypt a closed and encrypted message 
or to verify a digital signature accompanying a mes- is 
sage. A detailed explanation will be given later for the 
digital signature process, the ckising process, the 
decryption process and the digital signature verification 
process. 

[1049] The data codec 2607 encodes data to be trans- 20 
mitted or decodes data that are received under the con- 
trol of the CPU 1500. In this case, the erxxxiing is a 
process for generating data to be transmitted that 
includes communication control information arxl error 
correction information, and the decoding is a process 2S 
for performing error correction for the received data and 
for removing extra communication control information in 
order to obtain the data that a sender was to originally 
transmit. The data codec 2607 has a function for encod- 
ing or decoding data during data communication using a so 
digital wireless telephone, and a function for encoding 
or decoding data during infrared communication. The 
data codec 2607 performs encoding or decoding as 
determined by the CPU for data that are selected by the 

CPU. 35 

[1050] When, for example, a closed message accom- 
panied by a digital signatire is to be transmitted via dig- 
ital telephone conmjnication, the CPU 2600 empk>ys 
the cryptographic processor 2606 to perform a digital 
signature process and a closing process for the mes- 4o 
sage, employs the data codec 2607 to encode the 
obtained message to provide a data communication 
form for a digital telephone, and transmits the resultant 
message through the control logic unit 2610 to the 
channel codec 2615. 4s 
[1051] When a closed message accompanied by a 
digital signature is received via digital telephone com- 
munication, the CPU 2600 reads that message from the 
channel codec 2615 through the control logic unit 2610, 
enploys the data codec 2607 to decode the received so 
message, arxl permits the cryptographic processor 
2606 to decrypt the closed and enaypted message and 
to verify the digital signature accompanying the mes- 
sage. 

[1052] Similarly, when a closed message acoompa- ss 
nied by a digital signature is to be transmitted via infra- 
red communication, the CPU 2600 employs the 
cryptographic processor 2606 to provide a digital signa- 


ture for the message and to ck)se the message, and 
employs the data codec 2607 to encode the obtained 
message to provide a data form suitable for infrared 
communication. Then, the resultant message is trans- 
mitted to the serial-parallel converter 2608. 
[1053] When a closed message accompanied by a 
digital signature Is received via infrared communicatron, 
the CPU 2600 reads that message from the serial-par- 
allel converter 2608, employs the data codec 2607 to 
decode the received message, and permits the crypto- 
graphic processor 2606 to decrypt the closed and 
encrypted message and to verify the digital signature 
accompanying the message. 

[1 054] When the merchant depresses either the mode 
SMtch 504, the hook switch 505, the function switch 
506, the number key switch 507. the execution switch 
508 or the power switch 509, the key operator 2611 
asserts an inten-upt signal 2639 requesting that the 
CPU 2600 perform a process con-esponding to the 
switch that was manipulated. As is shown in Fig. 27A. 
the key operator 2611 includes a key control register 
(KEYCTL) 2710 for setting a valid/invalid state for each 
witch. The CPU 2600 accesses the key control register 
(KEYCTL) 2710 to determine whether a switch is effec- 
tive or not 

[1055] The audio processor 2613 includes an audio 
control register (SCTL) 2709 for controlling the audio 
process, as is shown in Fig. 27A. The CPU 2600 
accesses the audio control register (SCTL) 2709 to con- 
trol the operation of the audio processor 2613. When, 
for example, a request for a digital telephone call is 
received, the CPU 2600 accesses the audk} control reg- 
ister (SCTL) 2709 to output an arrival tone fa a digital 
call. Therefore, the audio processor 2613 drives the 
budspeaker 2612 to output an amval tone for a digital 
call. It should be noted, however, that when a call 
request is from the service providing system 110. no 
arrival tone is output, and the CPU 2600 initiates a proc- 
ess for establishing a conrvruinication session with the 
servwe providing system. 

[1056] The audio codec 2614 encodes an analog 
audio signal 2644 received from the audio processor 
2613 to provide digital audio data, and decodes digital 
audio data read from the channel codec 261 5 to provide 
an anabg audio signal 2643. The analog audio signal 
2643 is transmitted to the audio processa 2613, which 
amplifies the signal 2643 and drives the receiver of the 
telephone handset 2613 to release sounds from the 
receiver. The encoded digital audio data are transmitted 
to the channel codec 2615. which then changes the 
data into data that are suitable for transnrission. 
[1057] In addition, the audio codec 2614 includes an 
audio data encryption key register (CRYPT) 271 1 In 
which is stored an encryption key for the seaet key 
cryplo^aphy method that is enrployed for the encryp- 
tion and decryption of audio data. When the audio data 
encryption key is set to the audio data enayplion key 
register (CRYPT) 2711 by the CPU 2600, the audio 
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codec 2614 encodes the analog audio signal 2644 to 
provide digital audio data while at the same time 
encrypting the digital audio data, or decodes the digital 
audio data to provide an analog audio signal 2643 while 
at the same time decrypting the digital audio data. s 
[1058] Two types of data to be transmitted are 
received by the channel codec 2615: one type is digital 
audio data received as a digital audio signal 2847 from 
the audio codec 2614. and the other type is data-com- 
munication data received from the CPU via the control io 
logic unit 2610. 

[1 059] The channel codec 261 5 adds, as header infor- 
mation, identification information for the digital audio 
data or the data-communication data to the respective 
data, and multiplexes the digital audio data and the is 
data-communication data and transmits a resultant dig- 
ital signal 2616 to the digital communication adaptor 
2616. 

[1060] In addition, upon receiving a digital signal 2648 
from the digital communication adaptor 2616. the chan- 20 
nel codec 2615 examines a terminal ID. identifies the 
digital audio data and the data-communication data 
using the header infornr^on, and transmits these data 
respectively as a digital audio signal 2647 and a digital 
signal 2651 to the audio codec 2612 and the control ss 
logic unit 2610. Further, upon receiving a digital call or 
data-communication data, the channel codec 2615 
asserts an intenrupt signal 2649. and upon receiving 
digital audio data, brings a control signal 2645 low. The 
intenoipt signal 2649 ts a signal requesting that the CPU 30 
2600 perform the process in response to the amval of a 
digital call and a process for data-corrvnunication data. 
The control signal 2645 is a low-active signal for 
requesting ttiat the audio codec 2614 process the 
received digital audio data. 35 
[1061] In order to perform these processes, as is 
shown in Fig. 27A. the channel codec 2615 includes: an 
ID register (ID) 2703, in which a terminal ID is stored: a 
channel codec control register (CHCTL) 2704. which 
controls the operation of the channel codec 2615; an 40 
audio transmission buffer 2705, in which are stored dig- 
ital audio data received from the audio codec 2614; an 
audio reception buffer 2706, in which are stored digital 
audio data extracted from received data; a data trans- 
mission buffer 2707, in which are stored data-communi- 45 
cation data received from the CPU 2600 via the control 
logic unit 2610; and a data reception buffer 2708. in 
which are stored data-communication data extracted 
from received data. 

[1062] A control signal 2646 is a control signal with so 
which the audio codec 2614 directs the channel codec 
2514 to write data to tiie data transmission buffer 2705 
and to read data from the data reception buffer 2706. 
The audio codec 2614 sets the control signal 2646 low 
to write the digital audio data to the data transmission ss 
buffer 2705. and sets the control signal 2646 high to 
read the digital audio data from the data reception buffer 
2706. 


[1063] A control signal 2650 is a control signal with 
which the CPU 2600 directs the channel codec 2615 via 
the comrol logic unit 261 0 to write data to the data trans- 
mission buffer 2707 and to read data from the data 
reception buffer 2706. When the oonti^ol signal 2650 
goes low. tiie data-communication data are written to 
the data transmission buffer 2707. and when the control 
signal 2650 goes high, the data-communication data 
are read from the data reception buffer 2708. 
[1064] The digital communication adaptor 2616 
encodes a digital signal 2648 to obtain data having a 
format suitable for digital telephone commuiication, and 
outputs the resultant signal to a digital telephone com- 
miffiication fine 122. The digital communication ad^or 
2616 further decodes a signal received along the digital 
telephone communication line 122, and supplies an 
obtained digital signal 2648 to the channel codec 2615. 
[1065] The RS-232C interface 261 7 is an interface cir- 
cuit for connecting the RS-232C cable 514. The mer- 
chant terminal 102 conmunicates with tiie cash register 
511 via the RS-232C interface 2617. The RS-232C 
interface 2617 receives data from the cash register 51 1 
and asserts an intenupt signal 2652. The interrupt sig- 
nal 2652 is a signal requesting tiiat the CPU 2600 
exchange data with the cash register 51 1 via the RS- 
232C interface 2617. 

[1066] The control logic unit 2610 internally includes 
three registers, as is shown in Fig. 27A: a clock counter 
(CLOCKC) 2700. an update time register (UPTIME) 
2701, and an inten-upt register (INT) 2702. 
[1067] The dock counter 2700 measures the current 
time; the update time register 2701 is used to store the 
time at which the merchant terminal 102 updates data in 
the RAM 2602 and on the hard disk 2603 through com- 
munication conducted with the service providing system 
(data updating process); and the interrupt register 2702 
is used to indicate the reason an intenrLpt for the CPU 
2600 is generated. 

[1068] When the count in the clock counter 2700 
matches the count in the update time register 2701 . and 
when one of the intenript signals 2639. 2649 and 2652 
is asserted, the control logic unit 2610 writes the reason 
tiie interrupt was generated in the intenxipt register 
(INT) 2702, and asserts an intenupt signal 2618 
requesting that the CPU 2600 perform the interrupt 
process. For the interrupt process, the CPU 2600 reads 
from the interrupt register tiie reason the intenrupt was 
generated, and performs a corresponding process. 
[1069] The individual bit fields in the interrupt register 
(INT) are defined as is shown in Fig. 27B. 
[1 070] Bit 31 represents the state of the power switch. 
When the bit value is 0, it represents the power-OFF 
state, and when the bit value is 1. it represents the 
power-ON state. 

[1 071 1 Bit 30 represents the digital telephone comnuj- 
nication state. When the bit value is 0. rt rqaresents the 
state during which no digital telephone communication 
is being performed, and when the bit value is 1 . it repre- 
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sents the state during which digital telephone communi- 
cation is being performed. 

[1 072] Bit 28 represents the generation of a call arrival 
inten'upt. When the bit value is 1 , it signals the arrival of 
a digital call. In this bit field, a 1 is set 'when a digrtal tel- 
ephone call is received and the inten-upt signal 2649 is 
asserted. 

[1073] Bit 27 represems the generation of a data 
reception interrupt. When the bit value is 1 , it signals the 
reception of data. In this bit field, a 1 rs set when the 
data-communication data are received and the interrupt 
signal 2649 is asserted during the conduct of digital tel- 
ephone communication. 

[1074] Bit 26 represents the generation of an update 
interrupt requesting the performance of a data updating 
process. When the bit value is 1, it signals the genera- 
tion of the update intenrupi In this bit field, a 1 is set 
when the count in the dock counter nnatches the count 
In the update time register. 

[1 075] Bit 25 represents the generation of an external 
IF interrupt requesting that data conmunication with the 
cash register 31 1 be initiated. When the bit value is 1 . it 
signals the generation of the external IF intenupt In this 
bit field, a 1 is set when the interrupt signal 2652 
received from the RS-232C interlace 261 7 is asserted. 
[1 078] Bit 24 represents the generation of a key inter- 
rupt by the manipulation of a switch. When the bit value 
is 1. it represents the generation of the key interrupt. 
[1077] Bits 0 to 9 conrespond to switches 0 to 9 of the 
number key switches. Bits 10 and 11 correspond to 
number key switches and "#,- and bits 12 to 15 cor- 
respond to function switches F1 to F4. Bits 16 to 18 
respectively conrespond to the power switch, the execu- 
tion SAritch, the mode switch and the speech switch, arxj 
bit 20 corresponds to the hook switch. When a bit value 
is 1. it indicates that a switch corresponding to the bit 
has been depressed. 

[1078] Data stored In the RAM 2602 will now be 
described. 

[1 079] Fig. 28 is a spedf k; diagram of a RAM map for 
data stored in the RAM 2602. 
[1080] The RAM 2602 is constituted by five areas: a 
fundamental program object area 2800, a service data 
area 2801, a merchant area 2802, a work area 2803 
and a temporary area 2804. In the fundamental pro- 
gram object area 2800 are stored an ipgraded nrKXlule 
of a program stored in the ROM 2601 . a patch program 
arKi an additional program. The merchant area 2802 is 
an area that a merchant can freely use, the work area 
2803 is a work area that the CPU 100 employs when 
executing a program, and the temporary area 2804 is an 
area in which informatfon received by the merchant ter- 
minal is stored temporarily 

[1081] The service data area 2801 is an area in whk:h 
are stored contract information for the electronic com- 
m^ce service, availat>le credit card information, availa- 
ble payment card information and history information, 
and the data in this area are managed by the service 


providing system. The service data area 2801 is consti- 
tuted by nine sub-areas: a data managemem informa- 
tion area 2805, a merchant information area 2806, a 
merchant pMic key certiffoate area 2807, a merchant 

5 preference area 2808, a telephony information area 
2809, an available credit card list area 2810, an availa- 
ble payment card list 281 1 , a transactfon list area 2812. 
and an authorization report list 2813. 
[1082] The data management information area 2805 

10 is an area in which is stored management information 
for data stored in the service data area 2801 ; the mer- 
chant information area 2806 is an area in wfiich are 
stored the name of a merchant and information for the 
contents of a contract with a service provkier; the mer- 

15 chant public key certificate area 2807 is an area in 
which a public key certificate for a mercfiant is stored: 
the merchant preference area 2808 Is an area in whk^h 
preference information for a merchant is stored that 
concerns the mobile electronic commerce service; the 

20 telephony information area 2809 is an area in whkrfi 
informatfon concerning a digital telephone Is stored: the 
available credit card list area 2810 is an area in which Is 
stored list information for the credit cards the merchant 
can handle; the available payment card list area 281 1 1s 

25 an area in which is stored list information for the pay- 
ment cards the merchant can handle; the transaction list 
area 2812 is an area in which is stored sales history 
informatfon for the mobile electronic commerce service; 
and the authorization report list area 2813 is an area in 

30 which are stored the results (micro-check reference 
results) that are obtained by the service providing sys- 
tem when it examines the micro-check that is handled. 
[1 083] The information stored in the service data area 
2801 will now be described in detail. 

35 [1084] Fig. 29 is a detailed, specific diagram showing 
the relationships established for information stored in 
the service data area 2801 . 

[1085] The data management information 2805 con- 
sists of eleven types of informatfon: a last data update 

40 date 2900, a next data update date 2901 , a terminal sta- 
tus 2902. a merchant information address 2903, a mer- 
chant public key certificate address 2904. a nnerchant 
preference address 2905, a telephony information 
address 2906, an available credit card list address 

45 2907, an available payment card list address 2908. a 
transactfon list address 2909, and an authorization 
report list address 2910. 

[1 086] The last data update date 2900 represents the 
date on which the service providing system 110 last 

50 updated the data in the RAM 2602 and on the hard disk 
2603, and the next data update date 2901 represents 
the date on which the service providing system 1 10 will 
next update the data in the service data area 2801 . The 
merchant terminal 102 automatically initiates an update 

55 process when the is reached that is set acconding to the 
next data update date 2901 . 
[1 087] The time for the next data update date 2901 Is 
set in the update time register 2701 . When the next data 
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update date 2901 is reached, the merchant terminal 
102 Initiates the data updating process. During the data 
updating process, the sennce providing system 110 
updates data stored in the RAM and on the hard disk. 
This process is perlonned daily during a period (e.g., s 
late at night) in which communication traffic is not very 
heavy. The data updating process will be desaibed in 
detail later. 

[1 088] The terminal status 2902 represents the status 
of the merchant terminal 1 02. The merchant information io 
address 2903. the merchant pi^ic key certificate 
address 2904. the merchant preference address 2905. 
the telephony information address 2906, the available 
credit card list address 2907, the available payment 
card list address 2908. the transaction list address 2909 is 
and the authorization report list address 2910 respec- 
tively represent the first addresses for the areas in 
which are stored the merchant inforniation 2806. the 
merchant's public key certificate 2807. the merchant 
preference information 2808, the telephony infomretion 20 
2809. the available credit card list 2910. the available 
payment card list 281 1 . the transaction list 281 2 and the 
authorization report list 2813. 
[1089] The telephony information area 2809 includes 
three types of information: a last called number 2911, 25 
an address book address 2912 and a shortcut fie 
address 2913. TTie last called nunrteer 291 1 represents 
a telephone number for a prior call placed by the mer- 
chant, arvl is empfoyed for the redialing of a digital tele- 
phone. The address book address 2912 and the 30 
shortcut file address 2913 respectively represent 
addresses on the hard disk 2603 at which address tx>ok 
information and a shortcut file are stored. 
[1090] The available credit card list 2810 includes list 
information for those credit cards that can be hancfied by 35 
a merchant In the available credit card list 2810, three 
types of information are entered for each aedit card: a 
credit card name 2914, a service code list address 
2915. and a credit card clearing program address 2916. 
The credit card name 2914 represents the name of a 40 
credit card that the merchant can handle, and the serv- 
ice code list address 2915 is an address on the hard 
disk 2603 at which is stored a sen/ice code list that 
shows the types of services that can be provided by the 
merchant when the electronic credit card is used. The 45 
service code list is a list of payment service codes and 
optional payment codes tiiat the merchant can handle. 
[1091 ] The aedit card clearing program address 2916 
is an address on the hard disk 2603 at which is stored a 
credit card clearing program for the pertinent electronic so 
credit card. 

[1092] The available payment card list 281 1 includes 
list information for payment cards that can be handled 
by a merchartt. 

[1093] In ttie available payment card list 2811 . for ss 
each payment card, seven types of information are 
entered: a card name 2917. a card code 2918, a pay- 
ment card issuer ID 2919. a validity term 2920. an 


accounting machine private key 2921 . a card public key 

2922, and a payment card accounting nK)dule address 

2923. The card name 2917 represents the name of a 
payment card that tiie merchant can handle: tiie card 
code 2918 is code information that represents the type 
of electronic payment card: tiie payment card issuer ID 
2919 is ID information for a payment card issuer; and 
tiie validity term 2920 is the period during which tiie 
electronic payment card is valid. The accounting 
machine private key 2921 and tiie card public key 2922 
are encryption keys that are respectively paired witii tiie 
accounting machine public key 2012 and the card pri- 
vate key 201 1 for tiie electronic payment card. 

[1094] The payment card accounting module address 
2923 is an address on the hard disk 2603 at which is 
stored a program nvxjule (a payment card accounting 
module) for clearing the electronic payment card. 
[1095] In accordance witii the contract entered into by 
tiie merchant and the service providing system, tiie 
sendee provicEng system sets up or updates tiie con- 
tents of the available payment card list 281 1 in the data 
updating process. 

[1096] In the transaction list 2812, list information is 
stored to manage the history information for sales 
through the mot>ite electronic commerce service. For 
the sales effected through one mobile electronic com- 
merce service, in the tiiansactfon list 2812 are stored 
four information items: a fransaction number 2924. a 
service code 2925. a ti-ansaction time 2926. and a 
ti^nsaction information address 2927. 
[1097] The ti^nsaction number 2924 is a numt)er 
uniquely identifying a to'ansactfon performed with a user 
(from the view of the merchant); the service code 2925 
is code information identifying the type of mobile elec- 
b'onic commerce service that was provided for the user; 
and tiie transaction time 2926 is time information for the 
time at which a product was sold or the service was pro- 
vided via tiie mobile electronic service. 
[10981 The transaction information address 2927 is an 
address at which is stored a micro-check that describes 
the contents of the sale and a receipt. In the ti-ansaction 
information address 2927 is stored a local address that 
points to an address on the hard disk 2603 or a remote 
address that indicates an address in the merchant infor- 
mation server 903 of the service providing system 1 10. 
When the remote address is stored at the ti-ansaction 
information address 2927. and when tiie merchant 
accesses the sales history infomnation, the merchant 
terminal 1 02 downloads the history information from tiie 
service providing system to the temporary area, and 
displays it on tiie LCD. 

[1 099] The address stored at the transaction informa- 
tion address 2927 is determined by the service provid- 
ing system. In the data updating process, the 
transaction times for tiie sales history information items 
are compared, and a local address is assigned for the 
sales information having tiie latest transaction time. 
When there is adequate space on the hard disk 2603. 
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all the transaction information addresses can be local 
addresses. 

[1 1 00] A list of authorization report addresses 2928. 
which are addresses at which the results of the refer- 
ence of the micro-check are stored, is stored in the 5 
authorization report list area 281 3 as list information for 
managing the results of the micro-check reference proc- 
ess. 

[1101] ' In the authorization report address 2928 is 
stored a local address that Indicates an address on the io 
hard disk 2603 or a remote addr^s that indicates an 
address in the merchant Information server 903 of the 
service providing system 110. When the remote 
address is stored at the authorization report address 
2928, and when the merchant accesses the authoriza- is 
tion report, the merchant terminal 102 downloads the 
authorization report from the servrce providing system 
to the terrporary area, and displays it on the LCD. 
[1 102} The address stored at the authorization report 
address 2928 is determined by the sen^ice provkiing 20 
system. In the data updating process, the issuing dates 
for the authorizatk>n reports are conrpared, and a bcal 
address is assigned for the infomfYatk)n having the latest 
Issuing date. When there is adequate space on the hard 
disk 2603, all the authorization report addresses can t>e ss 
local addresses. 

[1 103] The intemal structure of the merchant temrvnal 
103 will now be described. 

[1104] Fig. 30 is a block diagram illustrating the 
arrangemem of the merchant terminal 103. This termi- 3o 
nal 103 comprises: a CPU (Central Processing Unit) 
3000, which employs a program stored in a ROM (Read 
Only Memory) 3001 to process data for transmission 
and for receptbn, and to control the other components 
via a bus 3029; a RAM (Random Access Memory) 35 

3002, in which are stored data that are processed and 
are to be processed by the CPU 3000; a EEPROM 
(Electric Erasable Programmable Read Only Memory) 

3003, in which is stored an accounting machine ID for 
the merchant terminal 103, a terminal ID and a tele- 40 
phone number for the merchant terminal 103 when 
used as a wireless telephone terminal, a merchant ID. a 
private key and a public key for a merchant cfigital signa- 
ture, a service provider ID, and the telephone number 
and the public key of the service providing system 110 45 
(the digital signature of the service provider accompa- 
nies the telephone numt>er of the service providing sys- 
tem); an LCD controller 3004, which operates the LCD 
603 under the control of the CPU 3000. and which dis- 
plays on the LCD an image that is selected by the CPU so 
3000; a cryptographic processor 3005, which encrypts 
and decrypts data under the control of the CPU 3000; a 
data codec 3006, which encodes data to be transmitted 
and decodes received data under the control of the 
CPU 3000; a memory card 3059 on which product infor- 55 
mation is recorded and a card skrt 614 for the memory 
card: an infrared communication nuxiute 3007. whk;h 
transmits and receives infrared rays during infrared 


communication; a bar code reader 610 for reading the 
bar code of a product; a key operator 3009. which 
detects the manipulation by the user of a mode switch 
604. a speech switch 605, an end switch 606, a function 
switch 607. a number key switch 608, a power switch 
611 and an execution switch 612; an audio processor 
301 1, which drives a budspeaker 3010. a receiver 602 
or a headphone set that is connected to a headphorte 
jack 612. and which amplifies an analog audk) signal 
that is input through a microphone 609 or the head- 
phone head; an audio codec 3012, which encodes an 
analog audio signal 3042 to provide digital audio data, 
and which decodes digital audio data to provide an ana- 
k>g audio signal 3043; a channel codec 3013, which 
generates data to be transmitted along a radk) channel, 
and which extracts, from received data, data that is 
addressed to the merchant terminal 103; a modulator 
3014, whk;h modulates a serial digital signal 3047 input 
by the channel codec 3013 to obtain an anatog trans- 
mission signal 3049 that employs as a baseband an 
electric signal 3052 that is transmitted by a PLL 301 6; a 
demodulator 3015, whk:h demodulates an analog signal 
3050 that is received white employing as a baseband an 
electric signal 3053 that is supplied by the PLL 3016. 
and which transmits a serial digital signal 3048 to the 
channel codec 3013; an RF unit 3017, which changes 
the analog transmission signal 3049 received from the 
modulator 3014 into a radio wave and outputs it through 
an antenna 601, and which, upon receiving a radio 
wave through the antenna 601. transmits an analog 
receptbn signal 3050 to the demodulator 3015; a bat- 
tery capacity detector 3018. which detects the capacity 
of the battery of the merchant terminal 103; and a con- 
trol logic unit 3008. which activates the channel codec 
3013. the PLL 3016 and the RF unit 3017. and whkrfi 
processes interrupt signals that are transmitted by the 
key operator 3009. the channel codec 3013 and the t>at- 
tery capacity detector 3018. and which serves as an 
interface when the CPU 3000 accesses the internal reg- 
isters of the key operator 3009. the audio processor 
301 1 , the audio codec 301 2 and the channel codec. 
[1 1 05] On the memory card 3059. the name of a prod- 
uct, a product code, a bar code and a price are recorded 
as product information. Based on the bar code of the 
product that is read by the bar code reader 610. the 
CPU 3000 accesses the product information on the 
memory card 3059 to calculate the amount of a charge. 
[1 1 06} The cryptographic processor 3005 includes a 
secret key enayption and decryption function and a 
public key encryption and decryption function. The ayp- 
tographic processor 3005 employs a cryptography 
method detemnined by the CPU 3000 and the keys to 
encrypt or decrypt data selected by the CPU 3000. The 
encryption avd decryption functions of the crypto- 
graphic processor 3005 are employed to perform a cfig- 
Ital signature process or a closing process for a 
message, and to decrypt a closed and encrypted mes- 
sage or to verify a digital signature accompanying a 
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message. A detailed explanation will be given later for 
the digital signature process, the closing process, the 
decryption process and the digital signature verification 
process. 

[1107] The data codec 3006 encodes data to be trans- s 
mitted or decodes data that is received, under the con- 
trol of the CPU 3000. In this case, the encoding is a 
process for generating data to be transmitted that 
includes communication control information and error 
correction infonmation, and the decoding is a process io 
for perforn^ng error corrections for the received data 
and for removing extra communication control irrforma- 
tbn in order to obtain the data that a sender was to orig- 
inally transmit. The data codec 3006 has a function for 
encoding or decoding data during data communication is 
conducted using a digital wireless telephone, and a 
function for encoding or decoding data during infrared 
communication. The data codec 3006 performs the 
encoding or decoding, as determined by the CPU 3000, 
of data that are selected by the CPU 3000. 20 
[1108] When, for example, a cfosed message accom- 
panied by a digital signature is to be transmitted via dig- 
ital wireless telephone communication, the CPU 3000 
employs the cryptographic processor 3005 to perfomi a 
digital signature process and a dosing process for a 2s 
message, empfoys the data codec 3006 to encode the 
obtained message to provide a data communication 
form for a digital wireless telephone, and transmits the 
resultant message through the contrd logic unit 3008 to 
the channel codec 3013. 30 
[1109] When a dosed message accompanied by a 
digital signature is received via digital wireless tele- 
phone communication, the CPU 3000 reads that mes- 
sage from the channel codec 3013 through the control 
logic unit 3008, empfoys the data codec 3006 to decode 35 
the received message, and permits the cryptographic 
processor 3005 to decrypt the dosed and encrypted 
message and to verify the digital signature accompany- 
ing tiie message. 

[1110] Similarly, when a cfosed message aocompa- 40 
nied by a digital si^ature is to be ti^ansmitted via infra- 
red communication, the CPU 3000 employs the 
cryptographic processa 3005 to provide a digital signa- 
ture for tiie message and to dose the message, and 
employs the data codec 3006 to encode the obtained 4s 
message to provide a data form that is suitable for infra- 
red communication. Then, the resultant message is 
transmitted to the infrared communicatfon nrxxlule 3007. 
[1111] When a dosed message accompanied by a 
digital signature is received via infrared comnminication. so 
the CPU 3000 reads that message from the infrared 
communication module 3007, enploys the data codec 
3006 to decode the received message, and permits the 
cryptographic processor 3005 to decrypt the dosed and 
encrypted message and to verify the dgital signature ss 
accompanying the message. 
[1112] When the merchant depresses either ttie mode 
switch 604. the speech switeh 605. the end switoh 606. 


the fonction switch 607, the number key switch 608. tiie 
power switch 611 or the executfon switch 612. the key 
operator 3009 detects the switch manipulation by tiie 
user and asserts an interrupt signal 3038 requesting the 
performance of a process conresponding to the switch 
that was manipulated. As is shown in Fig. 31 A. the key 
operator 3009 includes a key control register (KEYCTL) 
3112 for setting the valid/invalid state of each switch. 
The CPU 3000 accesses tfie key control register (KEY- 
CTL) 31 12 to set the valid/invalid state of each switch. 
[1113] The audio processor 30 11 indudes an audio 
control register (SCTL) 3111 for controlling the audio 
process, as is shown in Fig. 31 A. The CPU 3000 
accesses the audio control register (SCTL) 31 1 1 to con- 
trol the audio processor 301 1 . When, for exanple. a call 
request is received over a digital wireless telephone, the 
CPU 3000 accesses the audio control register (SCTL) 
3111 to output a call tone for a digital wireless tele- 
phone. As a result, the audb processor 301 1 drives the 
loudspeaker 3010 to release the call tone for a digital 
wireless telephone. It should be noted that when a call 
request is from tiie service providng system 110, no 
call an^rvat tone is output, and the CPU 3000 initiates a 
process for establishing a communication session with 
the service providing system. 
[1114] The audio codec 3012 encodes an anafog 
audio signal 3042 received from the audio processor 
3011 to provide digital audio data, and decodes digital 
audio data received from the channel codec 3013 to 
provide an anafog audio signal 3043. The anafog audio 
signal 3043 is transmitted to the audio processor 301 1 , 
which anrplif ies the signal 3043 and drives the receiver 
602 to produce sounds. The encoded digital audio data 
are ti-ansmitted as a digital audio signal 3046 to the 
channel codec 3013, which converts the data into data 
that can be tiansmitted across tiie radio channel. 
[1115] In addition, the audio codec 3012 indudes an 
audio data encryption key register (CRYPT) 3113 in 
which is stored an encryption key for the secret key 
cryptography method that is employed for the enayp- 
tfon and decryption of audio data. When tiie audio data 
encryption key is set to the audio data encryptfon key 
register (CRYPT) 3113 by tiie CPU 3000. the audfo 
codec 3012 encodes the analog audio signal 3042 to 
provide digital audio data while at the same time 
encrypting the digital audio data, or decodes the digital 
audio data to provide an analog audio signal 3043 while 
at the same time decrypting the digital audio data. 
[1116] Two types of data to be transmitted are 
received by the channel codec 3013: one type is digital 
audio data originating at the audio codec 3012 as a dig- 
ital audio signal 3046, and tiie otiier type is data-com- 
munication data originating at the CPU 3000 that pass 
through the control logic unit 3008 as a digital signal 
3056. 

[1117] The channel codec 3013 adds identificatfon 
data, as header information, to digital aucRo data and 
data^communication data, then converts tiie data into a 
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serial digital signal 3047 ha^^ng a data format that is 
suitable for a digital wireless telephone, and transmits 
the signal 3047 to the modulator 3014. 
[1118] In addition, upon receiving a serial digital signal 
3048 from the demodulator 3015; the channel codec s 
3013 examines a terminal ID and extracts only such 
data as is addressed to the channel codec 3013. 
removes the conrvnunication control information for the 
digital wireless telephone, identifies the digital audio 
data and the data-communication data in the header io 
information, and transmits these data as a digital audio 
signal 3046 and a digital signal 3056 to the audio codec 

3012 and the control logic unit 3008 respectively. 
[1119] Further, upon receiving a digital wireless call or 
data-communication data, the channel codec 3013 is 
asserts an interrupt signal 3054, and upon receiving 
digital audio data, brings the control signal 3044 low. 
The interrupt signal 3054 is a signal requesting that the 
CPU 3000 perform the process for a received digital 
wireless phone communication arxi a process for data- so 
communication data. The control signal 3044 is a tow- 
active signal for requesting that the audio codec 3012 
process the received digital audio data. 

[1120] In order to perform these processes, as is 
shewn in Rg. 31 A, the channel codec 3013 includes: an ss 
ID register (ID) 3105, in which is staed a terminal ID; a 
channel codec control register (CHGTL) 3106, which 
controls the operation of the channel codec 3013; an 
audio fransmission buffer 3107, in which are stored dig- 
ital audio data received from the audio codec 3012; an 3o 
audio reception buffer 3108, in which are stored digital 
audio data extracted from received data; a data trans- 
mission buffer 3109, in which are stored data-communi- 
cation data received from the control logic unit 3008; 
and a data reception buffer 31 10, in which are stored 3S 
data-communication data extracted from received data. 
[1121] A control signal 3045 is a control signal with 
which the audio codec 3012 directs the channel codec 

3013 to write data to the data transmission buffer 3107 
and to read data from the data reception buffer 3108. 40 
When the confrot signal 3045 goes low, the digital audio 
data are written to the data fransmission buffer 3107, 
and when the confrd signal 3045 goes high, the digital 
audio data are read from the data reception buffer 31 09. 
[1122] A confrol signal 3055 is a confrol signal with 4S 
which the CPU 3000 directs the channel codec 301 3 via 
the confrol logic unit 3008 to write data to the data trans- 
mission buffer 3109 and to read data from the data 
reception buffer 3110. When the control signal 3055 
goes tow, the data-communication data are written to so 
the data transmission buffer 3109, and when the confrol 
signal 3055 goes high, the data-comnunication data 
are read from the data reception kxjffer 31 10. 

[1123] The nxxiulator 3014 modulates a serial digital 
signal 3047 received from the channel codec 3013 to ss 
provide an analog transmission signal 3049, which is 
employed as a baseband for an etecfric signal 3052 that 
is supplied by the PLL 3016. and transmits the signal 


3049 to the RF unit 3017. The analog transmission sig- 
nal 3049 received by the RF urnt 3017 is output as a 
radio wave through the antenna 601. 
[1 124] When a radio wave is received at the antenna 
601. an-analog reception signal 3050 is transmitted by 
ttie RF unit 301 7 to ttie demodulator 3015. The demod- 
ulator 3015 demodulates frie analog signal 3050, while 
enploying as its baseband an electric signal 3053 that 
is supplied by frie PLL 3016, and fransmits an obtained 
serial digital signal 3048 to frie channel codec 3013. 
[1125] The battery capacity detector 3018, fordetect- 
ing the capacity of a battery, asserts an interrupt signal 
3057 when the remaining capacity of the battery of the 
merchant t^minal 103 is equal to or less than an 
amount Q (Q > 0) that is set by the CPU 3000. The inter- 
rupt signal 3057 is a signal for requesting that the CPU 
3000 perfomn a data backup process for the RAM 3002. 
The amount Q is targe enough to enable the merchant 
terminal 103 to communicate with the service providing 
system 1 10 in order to back up data in the RAM 3002 for 
the service providing system 110 (data backup proc- 
ess). 

[1 1 26] The confrol logic unit 3008 includes six internal 
registers, as is shown in Rg. 31 A: a frame counter 
(FRAMEC) 3100, a start frame register (FRAME) 3101 , 
a dock counter (CLOCKC) 3102, an update time regis- 
ter (UPTIME) 3103, an inten-i^Jt register (INT) 3104, 
and a key display register (KEY) 31 14. 
[1 127] The frame counter 3100 is employed to count 
the nun^er of frames for the digital wireless telephone; 
the start frame register 3101 is employed to store frie 
frame number of the frame that is to be activated next; 
the dock counter 31 02 is employed to measure the cur- 
rent time; frie update time register 3103 is employed to 
store the time at which the mercharrt terminal 103 will 
communicate with the service providing system 1 10 to 
update data in the RAM 3002 (data updating process); 
the interrupt register 3104 is employed to indicate ttie 
type of inteaupt that is generated for the CPU 3000; and 
frie key display register (KEY) 31 14 is employed to indi- 
cate the reason the interrupt is generated by key manip- 
ulation. 

[1128] Generally, to receive a call, the digital wireless 
telephone intermittently acquires confrol data for a con- 
frol channel and compares it with the terminal ID. The 
merchant terminal 1 03 employs the frame counter 3 1 00 
and the start frame register 3101 to intemrtittently 
acquire control data. First, tiie frame numt>er of the 
frame to be activated next is stored in advance in frie 
start frame register 3101, and when the count hekl by 
frie frame counter 3100 equals the count hekl by ttie 
start frame register 3101, to acquire control data the 
control k3gic unit 3008 activates the channel codec 
3013, frie PLL 3016 and ttie RF unit 3017 via an 
address data signal line 3058. 
[1 129] When frie count held by the dock counter 3102 
matches the count held by the update time register 
3103, or when one of the interrupt signals 3058, 3054 
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and 3057 is asserted, the control logic unit 3008 writes 
the type of and the reason for the interrupt in the inter- 
rupt register (INT) 3104 and in the key display register 
(KEY) 3114, and asserts an interrupt signal 3019 
requesting that the CPU 3000.perform an interrupt proc- . s. 
ess. For the interrupt processing, the CPU 3000 reads 
the type of and the reason for the interrupt that are 
stored in the interrupt register (IfsTT) 3104 and the key 
register (KEY) 31 14. and then perfomis a con-espond- 
ing process. 7o 
[1 1 30] The individual bit fields of the i nteaupt register 
(INT) 3104 are defined as is shown in Fig. 31 B. 
[1 1 31 ] Bit 3 1 represents the state of the power switch 
61 1 . When the bit value is 0, it indicates the state is the 
power-OFF state, and when the t)it value is 1. it indi- is 
cates the state Is the powerON state. 
[1132] Bit 30 represents the digital wireless telephone 
communication state. When the bit value is 0. it indi- 
cates the state is one where no digital wireless tele- 
phone comniunication Is being performed, and when 20 
the bit value is 1 . It indicates the state is one where dig- 
ital wireless telephone communication Is in process. 
[1133] Bit 29 represents the generation of a frame 
irrtempt requesting the intermittent acquisition of con- 
trol data. When the bit value Is 1 , rt indicates a condition ss 
that exists when a frame interruption has occurred. In 
this brt field, a 1 is set when the anrxxint held by the 
frame counter 3100 equals the amount held by the start 
frame register 3101. 

[1134] Bit 28 represents the generation of a call anival 30 
interrupt When the t>it value is 1 , it indicates that a dig- 
ital wireless call has arrived. In this bit field, a 1 is set 
when the terminal ID is matched and the interrupt signal 
3054 is asserted during the intermitterrt acquisition of 
control data for the digital wireless phone. 35 
[1135] Bit 27 represents the generation of a data 
reception Interrupt. When the bit value is 1 . it Indicates 
that data are being received. In this bit field, a 1 is set 
when the data-communication data are received and 
the intern^ signed 3054 is asserted during the course 4o 
of a digital wireless telephone communication session. 
[1136] Bit 26 represents the generation of an iqodate 
interrupt requesting the performance of a data updating 
process. When the bit value is 1 . it indicates the gener- 
ation of the update Interrupt In this bit field, a 1 is set 4s 
when the count held by the dock counter 31 02 matches 
the count held by the update time register 3103. 
[1137] Bit 25 represents the generation of a battery 
inteni43t requesting a backup process. When the bit 
value Is 1, it represents the generation of the battery so 
interrupt In this bit field, a 1 is set when the inten-upt 
signal 3057 that is received from the battery capacity 
detector 3018 Is asserted. 

[1 1 38] Bit 24 represents the generation of a key inter- 
rupt by the manipulation of the switch. When the bit ss 
value is 1, it represents the generation of the key inter- 
rupt 

[1139] The Individual bit fields in the key display reg- 


ister (KEY) 3114 are defined as is shown in Fig. 31C. 
[1140] Bits 31 to 25 correspond to switches "=," "+," 

"x," 'V," and total" for the number key switch 608. 
Bits 20 to 16 correspond to the end switch 606. the 
- speech switch 605. the mode switch 604, the execution 
switch 612 and the power switch 61 1 . Bits 15 to 12 cor- 
respond to switches '^4" to TV for function switch 307. 
Bits 1 1 arxj 10 respectively con-espond to switches 
and for the number key switches. Bits 9 to 0 conre- 
spond to switches 9 to 0 for the number key switches 
608. When the value of a bit is 1 , it indicates that a 
switch corresponding to that bit has been depressed. 
[1141] Data stored in the RAM 3002 will now be 
described. 

[1142] Fig. 32 is a specific diagram of a RAM map for 
data stored in the RAM 3002. 

[1143] The RAM 3002 is constituted by five areas: a 
fundamental program object area 3200, a service data 
area 3201. a merchant area 3202, a work area 3203 
and a temporary area 3204. In the fundaniental pro- 
gram object area 3200 are stored an upgraded module 
of a program stored in the ROM 3001. a patch program 
and an additional program. The merchant area 3202 is 
an area that a merchant can freely use. the work area 
3203 is a work area that the CPU 100 enploys when 
executing a program, and the temporary area 3204 is an 
area in which information received fc>y the merchant ter- 
minal is stored temporarily. 

[1 1 44] The servrce data area 320 1 is an area in which 
are stored contract information for the electronic com- 
merce service, available credit card information, availa- 
ble payment card Information arxi history information, 
and the data in this area are managed by the service 
providing system. The service data area 3201 is consti- 
tuted by ten sub-areas: a data management infbrmatkin 
area 3205, a merchant information area 3206, a mer- 
chant public key certificate area 3207. a merchant pref- 
erence area 3208. a telephony information area 3209. 
an available credit card list area 3210, an available pay- 
ment card list 3211. a transaction list area 3212, an 
authorization report list 3213, and an object data area 
3214. 

[1145] The data management information area 3205 
is an area in which is stored management information 
for data stored in the service data area 3201 ; the mer- 
chant informatk)n area 3206 is an area in which are 
stored the name of a merchant and information for the 
contents of a contract with a service provider; the mer- 
chant public key certificate area 3207 is an area in 
which a put)ltc key certificate for a merchant is stored; 
the merchant preference area 3208 Is an area in which 
preference information for a merchant is stored that 
concerns the mobile electronic commerce service: the 
telephony information area 3209 is an area in which 
information concerning a digital wireless telephone is 
stored; the available credit card list area 3210 is an area 
in which is stored list information for those credit cards 
the merchant can handle; the available payment card 
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list area 321 1 is an area in which is stored list informa- 
tion for those payment cards the merchant can handle; 
the transaction list area 3212 is an area in which is 
stored sales history information for the mobile electronic 
commerce service; the authorization report list area 5 
3213 is an area in which are stored the results (micro- 
check reference results) that are obtained from the 
service providing system by examining the micro-check 
that is handled; and the object data area 3 1 1 4 is an area 
in which are stored object data for the information man- 70 
aged in the other nine areas. 
[1 146] The information stored in the service data area 
3201 will rxjw be descrik)ed in detail. 
[1 147] Rg. 33 is a detailed, specific diagram showing 
the relationships estat)lished for information stored In is 
the service data area 3201 . 

[1 148] The data management information 3205 con- 
sists of eleven types of information: a last data update 
date 3300, a next data ifxJate date 3301 . a terminal sta- 
tus 3302. a merchant information address 3303, a mer- 20 
chant public key certificate address 3304. a merchant 
preference address 3305. a telephony information 
ackJress 3306. an available credit card list address 
3307. an avaitat}le payment card list address 3308, a 
transaction list address 3309. and an authorization 2s 
report list address 3310. 

[1 149] The last data i^xjate date 3300 represents tiie 
date on which the service providing system 110 last 
updated the data in the RAM 3002, and the next data 
update date 3301 represents the date on which tiie 30 
service providing system 1 10 wilt next update the data 
in the service data area 3201. The merchant temninal 
103 automatically initiates an update process when the 
time set according to the next data update date 3301 is 
reached. 35 
[1150] The time of tiie next data i^xlate date 3301 is 
set in the ipdate time register 3103. When the next data 
update date 3301 is reached, the merchant terminal 
103 initiates the data updating process. During tiie data 
updating process, the service providing system 110 40 
updates data stored in tiie RAM. This process is per- 
famed daily during a period (e.g., late at night) in which 
communication traffic is not very heavy The data updat- 
ing process will be described in detail later. 
[1 1 51 ] The ter ninal status 3302 represents tiie status 45 
of the merchant terminal 103. The merchant information 
address 3303, the merchant public key certificate 
address 3304, the merchant preference address 3305, 
the telephony information address 3306. the available 
credit card list address 3307, the available payment so 
card list address 3308. tiie transaction list address 3309 
and the authorization report list address 3310 respec- 
tively represent the first addresses for the areas in 
which are stored tiie merchant information 3206, the 
merchant publk: key certificate 3207, the merchant pref- ss 
erence information 3208. the telephony Information 
3209. the available crecfit card list 3210. tiie available 
payment card list 321 1 , tiie tBnsactfon list 321 2 and tiie 


autiiorization report list 3213. 
[1 1 52] The telephony information area 3209 includes 
tiiree types of information: a last called numt»er 3311. 
an address book address 3312 and a shortcut file 
. address 3313. The last called number 3311 represents 
a telephone number for a prior call placed by tiie mer- 
chant, and is employed for the redialing of a digital wire- 
less telephone. The address book address 3312 and 
tiie shortcut file address 3313 respectively represent 
addresses in tiie object data area 3214 at whk:h 
address book information and a shortcut file are stored. 
[1153] The available aedit card list 3210 includes list 
information for credit cards that can be handled by a 
mercharrt. In the available credit card list 3210, tiiree 
types of information are entered for each credit card: a 
aedit card name 3314, a service code list address 3315 
and a credit card clearing program address 3316. The 
aedit card name 3314 represents the name of a aedit 
card that the merchant can handle, and the service 
code list address 3315 is an address in tiie object data 
area 3214 at whk:h is stored a service code list tiiat 
shows the types of services tiiat can be provkied by tiie 
merchant when tiie electronic aedit card is used. The 
servk:e code list is a list of payment service codes and 
optional payment codes that tiie merchant can handle. 
The aedit card clearing program address 3316 is an 
address in the object data area 3214 at which is stored 
a aedit card clearing program for the pertinent elec- 
tronic credit card. 

[1154] The available payment card list 321 1 includes 
list information for payment cards that can be handled 
by a merchant. 

[1155] In the available payment card list 3211. for 
each payment card, seven types of information are 
entered: a card name 3317, a card code 3318, a pay- 
ment card issuer ID 3319. a validity temn 3320, an 
accounting machine private key 3321 , a card public key 

3322, and a payment card accounting module address 

3323. The card name 3317 represents the name of a 
payment card that the merchant can handle: the card 
code 3318 is code information tiiat represents the type 
of electronic payment card; the payment card issuer ID 
3319 is ID information for a payment card issuer; and 
tiie validity term 3320 is tiie period during which tiie 
electronic payment card is valid. The accounting 
machine private key 3321 and the card public key 3322 
are enayption keys tiiat are respectively paired with tiie 
accounting machine pi^ic key 2012 and the card pri- 
vate key 201 1 tor the electronic payment card. 

[1 1 56] The payment card accounting module address 
3323 is an address in the object data area 3214 in whk:h 
is stored a program module (a payment card accounting 
module) for clearing the electronk: payment card. 
[1 1 57] In accordance with tiie contract entered into by 
tiie merchant and the service providing syst^, tiie 
service providing system sets up or tpdates the con- 
tents of the available payment card list 321 1 in the data 
updating process. 
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[1158] In the transaction list 3212, list information is 
stored to nnanage the history Information for sales 
through the mobile electronic commerce service. For 
the sales effected through one mobile electronic oon> 
merce service^ in the transaction list 3212 are stored .5 
four information items: a transaction nunrber 3324. a 
service code 3325. a transaction time 3326. and a 
transaction information address 3327. 
[1159] Tlie transaction nunnber 3324 is a number 
uniquely identifying a transaction performed with a user 10 
(from the view of the merchant): the service code 3325 
is code Information identifying the type of mobile elec- 
tronic commerce service that was provided for the user; 
and the transaction time 3326 is time information for the 
tinne at which a product was sold or the service was pro* 15 
vided via the mobile electronic service. 
[1 1 60] The transaction information address 3327 is an 
address at which is stored a micro^heck that descrbes 
the contents of the sale and a receipt. In the transaction 
Information address 3327 is stored a local address that 20 
points to an address in the object data area 3214 or a 
renxite address that indicates an address in the mer- 
chant information server 903 of the service providing 
system 1 10. When the remote address is stored at the 
transaction information address 3327. and when the 25 
merchant accesses the sales history infomiation, the 
merchant terminal 103 downloads the history informa- 
tion from the service providing system to the temporary 
area, and displays it on the LCD. 

[1161] The address stored at the transaction rnfbmna- 30 
tion address 3327 is determined by the service provid- 
ing system. In the data updating process, the 
transaction times for the sales history information items 
are oonpared, and a local address is assigned for the 
sales information having the latest transaction time. 35 
When there is adequate space on the ROM 3302, all the 
transaction information addresses can be local 
addresses. 

[1 162] A list of authorization report addresses 3328, 
which are addresses at which the results of the refer- 40 
ence of the n^cro-check are stored. Is stored in the 
authorization report list area 3213 as list infomnation for 
managing tiie results of the micro-check reference proc- 
ess. 

[1163] In the authorization report address 3228 is 45 
stored a local address that indicates an address in the 
object data area 3214 or a renoote address that Indi- 
cates an address in the merchant information server 
903 of the service providing system 110. When the 
remote address is stored at the authorization report so 
address 3328, and when the merchant accesses the 
authorization report, the merchant terminal 103 down- 
loads the authorization report from the service providing 
system to the temporary area, and displays it on the 
LCD. 55 
[1 1 64] The address stored at the authorization report 
address 3328 is determined by the service providing 
system. In the data updating process, the issuing dates 


for the authorization reports are compared, and a local 
address is assigned for the information having the latest 
issuing date. When there is adequate space in the RAM 
3002, ail the authorization report addresses can be 
local addresses. 

[1 1 65] The internal structure of the automatic vending 
machine 104 will now be described. 
[1166] Fig. 34 is a block diagram illustrating the 
arrangement of the automatic vending machine 104. 
The automatic vending machine 104 can be internally 
divided into two sections: an accounting machine 3455. 
and a sales mechanism 3456. The accounting machine 
3455 is a unit for performing a payment card settiement 
process with the mobile user terminal 100, and the 
sates mechanism 3456 is a unit for performing another 
process, specifically, the calculation and display of the 
price of a product selected by a user, the discharge of 
the product to a discharge port 703, and the manage- 
ment of the products in stock 
[1167] In Rg. 34, the accounting ntachine 3455 com- 
prises: a CPU (Central Processing Unit) 3400. which 
employs a program stored in a ROM (Read Only Mem- 
ory) 3401 to process data for transmission and for 
reception arxl to control the other components via a bus 
3445: a RAM (Random Access Memory) 3402. in which 
are stored data that are being processed and are to k>e 
processed by the CPU 3400; a EEPROM (Electric Eras- 
able Prograrrvnable Read Only Memory) 3403. in which 
Is stored an accounting machine ID for the accounting 
machine 3455, a terminal ID and a telephone numt)er 
for the accounting ntachine 3455 when used as a wire- 
less telephone terminal, a merchant ID, a private key 
and a public key for a merchant digital signature, a serv- 
ice provider ID. and the telephone number and the pub- 
lic key of the service providing system 110 (the digital 
signature of the service provider accompanies the tele- 
phone number of the service providing system); a cryp- 
to^aphic processor 3404. which encrypts and decrypts 
data under the control of the CPU 3400: a data codec 
3405, which encodes data to be transnvtted and 
decodes received data under the control of the CPU 
3400: an infrared communication module 3406, which 
transmits and receives infrared rays during Infrared 
oomnxinication: a channel codec 3408, which gener- 
ates data to be transmitted along a radio channel, and 
extracts, from received data, data tiiat is addressed to 
the accounting machine 3455; a modulator 3409. which 
modulates a serial digital signal 3433 input by the chan- 
nel codec 3408 to obtain an analog transmission signal 

3435 that enrploys as a baseband an electric signal 
3440 that is transmitted by a PLL 3412; a demodulator 
3410, which demodulates a received analog signal 

3436 while employing as a baseband an electric signal 
3439 that is supplied by the PLL 3412. and which trans- 
mits a serial digital signal 3434 to the channel codec 
3408; an RF unit 341 1 . which changes the analog trans- 
mission signal 3435 received from the OKxlulator 3409 
into a radio wave and outputs It through an antenna 701 , 
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and which, upon receiving a radio wave through the 
antenna 701, transmits an analog reception signal 3436 
to the demodulator 3410; an external interlace 3413, 
which serves as an interface for the sales mechanism 
3456; and a control logic unit 3407, which activates the 5. 
channel codec 3408, the PLL 3412 and the RF unit 

3411. and which processes interrupt signals that are 
transmitted by the channel codec 3408 and the external 
interface 3413 and serves as an interface when the 
CPU 3400 accesses the channel codec 3408. the PLL w 

3412, the RF unit 341 1 or the external interface 3413. 
[1 1^] The sales mechanism 3456 comprises: a touch 
panel LCD 702; a loudspeaker 3415; a product selec- 
tion switch 704; a sold out display 705; a price calculator 
3416, for calculating the price of a product; a product is 
manager 3417. for managing the products in stock; a 
product output mechanism 3418, for outputting a 
selected product to the discharge port 703: a CD-ROM 
drive 3419; and a controller 3414. for controlling the 
operations of the touch panel LCD 702. the loudspeaker 20 
3415. the sokJ out display (LED) 705. the price calcula- 
tor 3416. the product manager 3417, the product output 
mechanism 3418, and the CD-ROM drive 3419. 

[1169] The accounting machine 3455 and the sales 
mechanism 3456 communicate with each other via the 25 
external interface 3413. The accouming machine 3455 
receives an accounting process request from the sales 
mechanism 3456, and performs the payment card set- 
tlement process for a designated amount The amount 
for the payment card settlement is calculated by the 30 
price calculator 3416 of the sales mechanism 3456. 
That is, the accounting device 3455 performs only the 
payment card settlement process, and the sales mech- 
anism 3456 performs another process as an automatic 
vending machine. 35 
[1170] The sales mechanism 3456 has two primary 
operating modes: a purchase mode and a product infor- 
mation mode. The purchase mode is the mode in which 
the purchase of a product by a user takes place, and the 
product information mode is a mode in whteh informa- 40 
tion concerning a product is provided to a user before 
(or after) the product has been purchased. 
[1171 ] An operating menu and varfous information are 
displayed on the touch panel LCD 702 by the controller 
3414. Normally, the operation menu shown in Fig. 7 is 4s 
displayed on the touch panel LCD 702. When a user 
presses "purchase" ("purchase start operation"), the 
sales mechanism 3456 is set to the purchase mode. 
When a user presses "product information," the sales 
mechanism 3456 is set to the product information so 
mode. 

[1172] A CD-ROM on which information concerning 
products is stored is loaded into the CD-ROM drive 
3419. When the user presses "product information" on 
the operating menu and the product information mode is ss 
set, the infornnation stored on the CD-ROM is output to 
the touch panel LCD 702 and through the loudspeaker 
3415. 


[1173] The information concernirrg products that is 
stored on the CD-ROM is multimedia information includ- 
ing text, images, videos and audk), and may be video 
information consisting of a CF (Commercial Film) of a 
product. Especially for a packaged media product, such 
as a video or a nruisic CD (Conpact Disk), or a game 
software product, sample information for the product is 
stored on the CD-ROM so that the user can try out the 
product in the product information mode. 
[1174] When the purchase mode is set by pressing 
"purchase" on the operating menu, the message "Select 
desired product" is displayed on the touch panel LCD 
(display "waiting far product selection operation"), and 
the sales mechanism errters the product selection oper- 
ation waiting state. When the user depresses the prod- 
uct selection switch, the name, the volume and the total 
amount of the product, and a laayment" button indicat- 
ing the start of the payment operation are displayed on 
the touch panel LCD (display "waiting for payment start 
operatfon*^. At this time, the price calculator 341 6 cateu- 
lates the total amount, and the product manager 3417 
verifies the count of the product in stock. This process is 
performed each time the user depresses the product 
selection switch. When the in stock supply of a product 
is exhausted, the sold out display (LED) blinks and the 
user can no fonger select the pertinent product. 
[1 1 75] When the user depresses the "payment" button 
C'payment start operation"), the controller 3414 trans- 
mits, to the accounting machine 3455, an accounting 
processing request for an amount that corresponds to 
the total amount provided by the price calculator 3416, 
and displays, on the touch panel LCD. a message 
requesting the payment using an electronic payment 
card (display "waiting for payment operation"). 
[1176] When the payment card settlement process 
has t»een completed by the accounting machine 3455 
and the mobile user terminal 100, the controller 3414 
controls the product output mechanism 3418 so as to 
output a selected product at the discharge port 703, dis- 
plays on the touch panel a message indicating the set- 
tlement process has been completed, and a little later, 
displays the operating menu again. At this time, the nwl- 
timedia information stored on the CD-ROM may be out- 
put instead of the message indicating that the 
settlement has been completed. 
[1177] 7>ie accounting machine 3455 performs the 
payment card settlement process that is requested by 
the sales mechanism 3456. and has partially the same 
arrangement as the merchant terminal 103. A difference 
from the merchant terminal 103 is that the accounting 
machine 3455 does not include a unit, such as an audio 
codec for performing audio processing, and input/output 
interfaces, such as number key switches, an execution 
switch, a k>ar code reader and an LCD, and instead, 
includes the external interface 3413 for communicating 
with the sales mechanism 3456. 
[1178] In addition, as a functional difference, the 
accounting machine does not include the credit card 
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settlement, function and the digrtal wireless telephone 
communication function, which is enrployed for data 
communications with the service providing system. 
[1179] The ayptographic processor 3404 includes a 
secret key encryption and decryption function arxi a 
public key encryption and deayption function. The ayp- 
tographic processor 3404 employs a ayptography 
method determined by the CPU 3400, and the keys to 
encrypt or decrypt data selected by the CPU 3400. The 
encryption and decryption functions of the crypto- io 
graphic processor 3404 are employed to perform a dig- 
ital signature process or a closing process for a 
message, and to decrypt a closed arxi encrypted mes- 
sage or to verify a digital signature acconpanying a 
message. is 
[1 180] The data codec 3405 encodes data to be trans- 
mitted or decodes data that was received, under the 
control of the CPU 3400. In this case, the encoding is a 
process for generating data to be transmitted that 
includes communication control Information and error 20 
correction information, and the decoding Is a process 
for performing error correction for the received data and 
for renrxsving extra communication control Informatkxi in 
order to obtain the data that a sender was to originally 
transmit The data codec 3405 has a function for enood- 2s 
Ing or decoding data during data communicatbn con- 
ducted using a digital wireless telephone, and a function 
for encocfing or decoding data during infrared communi- 
cation. The data codec 3405 performs the encoding or 
decoding as determined by the CPU 3400 for data that 30 
are selected by the CPU 3400. 
[1 181 ] When, for example, a cbsed message accom- 
panied by a digital signature is to be transmitted via dig- 
ital wireless telephone communication, the CPU 3400 
employs the cryptographic processor 3404 to perform a 35 
digital signature process and a dosing process for a 
message. empk3ys the data codec 3405 to encode the 
obtained message to provide a data communication 
form that is suitable for a dgital wireless telephone, and 
transmits the resultant message through the control 40 
logic unit 3407 to the channel codec 3408. 
[1182] When a dosed message accompanied by a 
digital signature Is received via digital wireless tele- 
phone communication, the CPU 3400 reads that mes- 
sage from the channel codec 3408 through the control 4S 
logic unit 3407, emptoys the data codec 3405 to decode 
the received message, and permits the cryptographic 
processor 3404 to decrypt the dosed and encrypted 
message arxl to verify the digital signature accompany- 
ing the message. so 
[1183] Similarly, when a cbsed message accompa- 
nied by a digital signature is to t>e transmitted via infra- 
red communication, the CPU 3400 employs the 
cryptographic processor 3404 to provkie a digital signa- 
ture for the message and to dose the message, and ss 
employs the data codec 3405 to encode the obtained 
message to provkie a data form that Is suitable for infra- 
red communication. Then, the resultant message is 


transmitted to the infrared communication nxxlule 3406. 
[1184] When a dosed message accompanied by a 
digital signature is received via infrared communication, 
the CPU 3400 reads that message from the infrared 
comrrunication module-3406. employs the data codec 
3405 to decode the received message, and permits the 
ayptographic processor 3404 to deaypt the dosed and 
encrypted message and to verify the digital signature 
accompanying the message. 
[1185] The channel codec 3408 adds Identification 
data, as header Information, to data-communication 
data that are received as a digital signal 3429 from the 
CPU 3400 via the control logk; urrit 3407, then converts 
the data Into a serial digital signal 3433 having a data 
format that is suitable for a digital wireless telephone, 
and transmits the signal 3433 to the nxxlulator 3409. 
[1 186] In additksn, upon receiving a serial digital signal 

3434 from the demodulator 3410. the channel codec 
3408 examines a terminal ID and extracts only such 
data as is addressed to the channel codec 3410. 
renrxsves the communication contrd infomiatbn for the 
digital wireless telephone. Identifies the digital audio 
data and the data-communicatk>n data in the header 
infonnation, and transmits the data-oommunk;ation data 
as a digital audio signal 3429 to the audk) codec 3012 
and the control logic unit 3407. 

[1 1 87] Further, upon receiving a digital wireless call or 
data-communk;ation data, the channel codec 3408 
asserts an Intenrupt signal 3431. The inten^upt signal 

3431 is a signal requesting that the CPU 3400 perform 
the process for a digital wireless phone communlcatk>n 
that has been received and a process for data-commu- 
nicatbn data. 

[1188] In order to perform these processes, as is 
shown in Fig. 35A, the channel codec 3408 includes: an 
ID register (ID) 3505, in which is stored a terminal ID; a 
channel codec control register (CHCTL) 3506. which 
controls the operation of the channel codec 3408; a 
data transmissk)n buffer 3507. In whk^h are stored data- 
oomnunication data received from the CPU 3400 via 
the control logic unit 3407; and a data reception buffer 
3508. in which are stored data-communication data 
extracted from received data. 
[1189] A control signal 3432 is a control signal with 
which the CPU 3400 directs the channel codec 3408 via 
the control logic unit 3407 in order to write data to the 
data transmission txtffer 3507 and to read data from the 
data reception buffer 3508. When the control signal 

3432 goes low, the data-communication data are written 
to the data transmission buffer 3507, arxl when the con- 
trol signal 3432 goes high, the data-communicatbn 
data are read from the data reception buffer 3508. 
[1190] The modulator 3409 nrxxiulates a serial digital 
signal 3433 received from the channel codec 3408 to 
provkie an analog transmission signal 3435, which is 
employed as a baseband for an electric signal 3440 that 
Is supplied by the PLL 3412, and transmits the signal 

3435 to the RF unit 341 1 . The analog transmisswn sig- 
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nal 3435 received by the RF unit 341 1 is output as a 
radio wave through the antenna 701 . 
[11 91 ] When a radio wave is received at the antenna 
701, an analog reception signal 3436 is transmitted by 
the RF unit 341 1 to the demodidator 3410. The demod- s 
ulator 3410 denrtodulates the analog signal 3436. while 
enploying as its baseband an electric signal 3439 that 
is staled by the PLL 3412, and transmits an obtained 
serial digital signal 3434 to the channel codec 3408. 
[1 1 92] The external interface 34 1 3 is an interface dr- io 
cuit tor connecting the accounting machine 3455 to the 
sales mechanism 3456. An accounting process request 
is transmitted by the sales mechanism 3456 to the 
accounting machine 3455 during the interrupt process. 
The interrupt process is requested of the CPU 3400 is 
when the external interface 3413 asserts an interrupt 
signal 3443. 

[1 193] The control logic unit 3407 includes five inter- 
nal registers, as is shown in Rg. 35A: a frame counter 
(FRAMEC) 3500. a start frame register (FRAME) 3501 . so 
a clock counter (CLOCKC) 3502. an update time regis- 
ter (UPTIME) 3503, and an intern^ register (INT) 
3504. 

[1 1 94] The frame counter 3500 is employed to count 
the number of frames for the digital wireless telephone; ss 
the start frame register 3501 is employed to store the 
frame number of the frame that is to be activated next; 
the clock counter 3502 is employed to measure the cur- 
rent time; the update tinrie register 3503 is employed to 
store the time at which the automatic vending machine 30 
104 will communicate with the service providing system 
110 to update data in the RAM 3402 (data updating 
process); and the interrupt register 3504 is employed to 
indicate the type of interrupt that has been generated for 
the CPU 3400. 35 
[1 195] Generally, to receive a call, the digital wireless 
telephone intermittently acquires control data for a con- 
trol channel and compares it with the terminal ID. The 
automatic verxllng machine 104 employs the frame 
counter 3500 and the start frame register 3501 to inter- 4o 
mittently acquire control data. First, the frame number of 
the frame to be activated next is stored in advance in the 
start frame register 3501, and when the count held by 
the frame counter 3500 equals the count held by the 
start frame register 3501, the control logic unit 3407 4S 
activates the channel codec 3408, the PLL 3412 and 
the RF unit 341 1 to receive control data. 
[1 196] When the count held by the clock counter 3502 
matches the count held by the update time register 
3503, or when the inten^upt signal 3431 or 3443 is so 
asserted, the control logic unit 3407 writes the type of 
and the reason for the interrupt in the interrupt register 
(INT) 3504, and asserts an interrupt signal 3428 
requesting that the CPU 3400 perform an interrupt proc- 
ess. For the interrupt processing, the CPU 3400 reads ss 
the type of and the reason for the interrupt that are 
stored in the Inten-upt register (INT) 3504. and then per- 
forms a corresponding process. 


200 

[1 1 97] The individual bit fields of the imerrupt register 
(INT) 3504 are defined as is shown in Fig. 35B. 
[1 1 98] Bit 30 represents the digital wireless telephone 
communication state. When the bit value is 0, it indi- 
cates the state is one where no digital wireless tele- 
phone communication is being perfornr>ed. and when 
the bit value is 1 . it indicates the state is one where dig- 
ital wireless telephone communication is in progress. 
[1199] Bit 29 represents the generation of a frame 
interrupt requesting the intermittent acquisition of con- 
trol data. When the bit value is 1 . it indicates a condition 
that exists when a frame interri^Dtion has occurred. In 
this bit fiekj, a 1 is set when the count held by the frame 
counter 3500 equals the count heki by the start frame 
register 3501 . 

[1 200] Bit 28 represents the generation of a call arrival 
interrupt. When the bit value is 1. it indicates that a dig- 
ital wireless call has arrived. In this bit fieki, a 1 is set 
when the terminal ID is matched and the intenrupt signal 
3432 is asserted during the intermittent acquisition of 
control data for the digital wireless phone. 
[1201] Bit 27 represents the generation of a data 
reception Interrupt. When the bit value is 1. it indicates 
that data is being received. In this bit field, a 1 is set 
when the data-communication data are received and 
the interrupt signal 3431 is asserted during the course 
of digital wireless telephone communication. 
[1 202] Bit 26 represents the generation of an update 
interrupt requesting the performance of a data updating 
process. When the bit value is 1 . it indk^es the gener- 
ation the update interrupt. In tills bit fiekj, a 1 is set when 
the count hekJ by the dock coumer 3502 matches the 
count hekl by the update time register 3503. 
[1 203] Bit 25 represents the generation of an external 
IF interrupt requesting data communication be initiated 
with the sales mechanism 3456. When the bit value is 1 . 
it signals the generation of tiie external IF inten-upt. In 
this bit f ieki, a 1 is set when the interrupt signal 3443 
received from the external interface 3413 is asserted. 
[1204] Data stored in the RAM 3402 will now be 
described. 

[1205] Fig. 36 is a specific diagram of a RAM map for 
data stored in the RAM 3402. 

[1206] The RAM 3402 is constituted by four areas: a 
fundamental program object area 3600. a service data 
area 3601. a work area 3602 and a temporary area 
3603. In the fundamental program object area 3600 are 
stored an ipgraded module of a program stored in the 
ROM 3401 , a patch program and an additional program. 
The work area 3602 is a work area that the CPU 100 
employs when executing a program, and the temporary 
area 3603 is an area in which information received by 
the automatic vending machine is stored terrporarily 
[1 207] The service data area 3601 is an area in whk;h 
are stored contract information for the electrortic com- 
merce sen^ice. available payment card information and 
history information, and the data in this area are man- 
aged by the service providing system. The service data 
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area 3601 is constctuted by seven sub-areas: a data 
management intbrmatfon area 3604. a merchant infor- 
mation area 3605. a merchant putDlic key certrficate 
area 3606, a merchant preference area 3607, an avail- 
able payment card list 3608. a transaction list area 3609 5 
and an object data area 3610. 
[1208] The data management information area 3604 
is an area in which is stored management infomiation 
for data stored in the service data area 3601 ; the nrer- 
chant information area 3605 is an area in which are 10 
stored the name of a merchant and information for the 
contents of a contract with a sen/ice provider; the mer- 
chant public key certificate area 3606 is an area in 
which a public key certificate for a merchant is stored; 
the merchant preference area 3607 is an area in which is 
is stored preference information for a merchant that 
concerns the mobile electronic commerce service: the 
available payment card list area 3608 is an area In 
which is stored list information for those payment cards 
that the merchant can hancfle; the transaction list area 20 
3609 is an area in which sales history information for the 
nrxiblte electronic commerce service is stored: and the 
object data area 3610 is an area in whk;h are stored 
object data for the informatfon managed in the other six 
areas. 25 
[1209] The information stored In the service data area 
3601 wilt now t>e desaibed in detail. 
[1210] Fig. 37 is a detailed, speciffo diagram showing 
the relationships established for informatfon stored in 
the service data area 360 1 . 30 
[121 1] The data management information 3604 con- 
sists of eight types of information: a last data update 
date 3700. a next data update date 3701 . an accounting 
machine status 3702, a merchant information address 
3703. a merchant put)iic key certrficate address 3704. a 35 
merchant preference address 3705, an available pay- 
ment card list address 3706 and a transactfon list 
address 3707. 

[1212] The last data update date 3700 represents the 
date on which the service providing system 110 last 40 
updated the data in the RAM 3402, and the next data 
update date 3701 represents the date on which the 
sendee providing system 110 will next ipdate the data 
In the sen^ice data area 3601. The automatic vending 
machine 104 automatically initiates an update process 45 
when the time set according to the next data update 
date 3701 is reached. 

[1213] The time of the next data update date 3701 is 
set in the update time register 3503. When the next data 
tpdate date 3701 is reached, the automatic vending so 
machine 104 initiates the data ifxlating process. During 
the data updating process, the service providing system 
110 updates data stored in the RAM. This process is 
performed daily during a period (e.g., late at night) in 
which communication traffic is not very heavy. The data ss 
updating process will be described in detail later. 
[1214] The accounting machine status 3702 repre- 
sents the static of the accounting machine 3455. The 


merchant information address 3703, the merchant pub- 
lic key certificate address 3704. the merchant prefer- 
ence address 3705. the availak)le payment card list 
address 3706 and the transaction list address 3707 
respectively represent the first addresses for the areas 
in which are stored the merchant information 3605, ttie 
merchant public key certificate 3606. the merchant pref- 
erence information 3607. the available payment card list 
3608 and the transaction list 3609. 
[1215] The available payment card list 3608 includes 
list information for payment cards that can be handled 
by a merchant. 

[1216] In the available payment card list 3608. for 
each payment card, seven types of information are 
errtered: a card name 3708, a card code 3709, a pay- 
ment card issuer ID 3710. a validty term 3711. an 
accounting machine private Key 3712, a caiti put^lic key 

3713, and a payment card accounting module address 

3714. The card name 3708 represents the name of a 
payment card that tiie merchant can handle: tiie card 
code 3709 is code information that represents the type 
of electronic payment card: the payment card issuer ID 
3710 is ID informatfon for a payment card issuer: and 
the validity term 371 1 is the perfod during which the 
electronic payment card is valid. The accounting 
nrmchine private key 3712 and the card public key 3713 
are encryption keys that are respectively paired with the 
accounting machine public key 2012 and the card pri- 
vate key 201 1 for the electronic payment card. 

[1 21 7] The payment card accounting module address 
371 4 is an address in the object data area 361 0 in which 
is stored a program module (a payment card accounting 
nKxJule) for clearing the electronic payment card. 
[1218] In accordance with the contract entered into by 
the merchant and the service providing system, the 
service providing system sets up or updates the con- 
tents of the available payment card list 3608 in the data 
updating process. 

[1219] In the transaction list 3609, list information is 
stored to manage the history information for sales 
through the mobile electronic commerce service. For 
the sales effected through one payment card clearing 
process, in the transaction list 3609 are stored four 
information items: a transaction numk>er 3715, a service 
code 3716. a transaction time 3717, and a transaction 
information address 3718. 

[1220] The transaction number 3715 is a number 
uniquely identifying a transaction performed with a user 
(from the view of the merchant): the service code 3716 
is code information identifying the type of mobile elec- 
tronic commerce service that was provided for the user: 
and the transaction time 3717 is time information for the 
time at which a product was sold or the service was pro- 
vided via tiie rrv)bile electronic service. 
(1 221 ] The transaction information address 371 8 is an 
address in the object data area 3610 at whfoh is stored 
a miao^heck that describes the contents of tiie sale 
and a receipt. 
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[1222] The internal structure of the electronic tele- 
phone card accounting machine 800 will now be 
desaibed. 

[1223] Fig. 38 is a block cfiagram illustrating the 
arrangement of the electronic telephone card account- s 
ing machine 800. 

[1224] In Fig. 38, the electronic telephone card 
accounting machine 800 comprises: a CPU (Central 
Processing Unit) 3800, which employs a program stored 
in a ROM (Read Only Memory) 3801 to process data for io 
transmission and for reception and to control the other 
components via a bus 3845: a RAM (Random Access 
Memory) 3802 and a hard disk 3803, whereat are 
stored data that have been processed and that are to be 
processed by the CPU 3800; a EEPROM (Electric Eras- is 
able Programmable Read Only Memory) 3804, in which 
is stored an accounting machine ID for the electronic 
telephone card accounting machine 800, a comnuinica- 
tion service provkJer ID, a private key and a public key 
for the digital signature of a oommunication service pro- 20 
vider, a service provider ID. and the telephone number 
and the public key of the service providing system 110 
(the digital signature of the service provider acoompa- 
ni^ the telephone number of the service providing sys- 
tem); a cryptographic processa 3805. which enaypts 25 
and decrypts data under the control of the CPU 3800; a 
data codec 3806. which encodes data to be transmitted 
and decodes received data under the control of the 
CPU 3800; and an extennal interface 3807. whk:h 
serves as an interface for the switch 601 . 30 
[1225] The electror^c telephone card accounting 
machine 800 and the switch 801 conmunk^ate with 
each other via the external interface 3807. The elec- 
tronic telephone card accounting machine 800 receives 
an accounting process request from the switch 801 and 35 
perfomns the telephone card settlement process for a 
designated value. The value for the telephone card set- 
tlement is designated by the switch 801 . 
[1226] For a communication (micro-check call) using 
the electronic telephone card, ipon receiving the 40 
accounting process request from the switch 801, the 
electronic telephone card accounting machine 800 
exchanges settlement information with the mobile user 
tenrvnal 100 upon the initiation of and during the line 
connection process (communication in process), and 4S 
perfomis the telephone card settlement process. The 
switch 801 switches the lines in accordance with the 
condition of the settlement process performed by the 
electronic telephone card accounting machine 800. 
[1 227] Upon the initiation of the line connection proc- so 
ess, and upon each occurrence of the elapse of a con* 
start period of time, the telephone card settlemert 
process Is performed for the total communication 
charge assessed for the communk:ation time. 
[1228] First, when the line connection process ^ ss 
begun, a settlemert is made for the communication 
charge V (V > 0) for a oonstart communteation time T (T 
> 0). Then, on each occask)n that the communication 


time exceeds T, a settlemert process is performed for a 
communication charge 2V for a comnwnication time 21, 
instead of for a communication charge V. Thereafter, 
whenever the communication time exceeds NT (N is a 
natural number), a settlement process is performed for 
a communication charge (N + 1)V for a communication 
time (N + 1)T, rather than for a communicatfon charge 
NV. 

[1229] When the electronic telephone card accounting 
macNne 800 has normally completed the telephone 
card settlemert process for the received accounting 
process request, the switch 801 either establishes a 
new line connection, or continues the cunert line con- 
nection. When, for a specific reason, the telephone card 
settiemert is not successful, the switch 801 either 
refrains from establishing a new line connection, or dis- 
connects the line that is currently in use. 
[1230] The cryptographic processor 3805 includes a 
secret key encryption and decryption function and a 
publk; key encryption and decryption function. The cryp- 
tographic processor 3805 enploys a cryptography 
metiiod detemnined by the CPU 3800 and the keys to 
encrypt or decrypt data selected by the CPU 3800. The 
enayption and decryption functions of the crypto- 
graphic processor 3805 are employed to perform a dig- 
ital signature process or a closing process for a 
message, and to decrypt a dosed and encrypted mes- 
sage or to verify a digital signature accompanying a 
message. 

[1231] The data codec 3806 encodes data to be trans- 
mitted or decodes data that is received, under the con- 
trol of the CPU 3800. In this case, the encoding is a 
process for generating data to be transmitted that 
includes communication control information and error 
correction information, and the decoding is a process 
for performing enror correction for the received data and 
for removing extra communication control information in 
order to obtain the data that a sender was to originally 
transmit. The data codec 3806 has a function for encod- 
ing or decoding data during data communication con- 
ducted using a digital wireless telephone, and a function 
for encoding or decoding data during infrared communi- 
cation. The data codec 2806 performs encoding or 
decoding determined by the CPU 3800 for data that are 
selected by the CPU 3800. 

[1232] When, for example, a closed message accom- 
panied by a digital signature is to be transmitted to the 
mobile user terminal 100. the CPU 3800 employs tiie 
cryptographic processor 3805 to perform a digital signa- 
ture process and a closing process for a message, 
employs tiie data codec 3806 to encode the obtained 
message to provide a data communication form tiiat is 
suitable for digital telephone oorrvnuncation. and trans- 
mits the resultart message through the external irter- 
face 3807 to the swvitch 801 . 

[1233] When a closed message accompanied by a 
digital signature is received from the mobile user termi- 
nal 100. the CPU 3800 receives that message through 
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the external interface 3807, ennploys the data codec 

3806 to decode the received message, and permits the 
cryptographic processor 2805 to decrypt the dosed and 
encrypted message and to verify the digital signature 
accompanying the message. . § 
[1234] Similarly, when a closed message accompa- 
nied by a digital signature is to be transmitted to the 
service providing system 110, the CPU 3800 employs 
the cryptographic processor 3805 to provide a digital 
signature for the message and to dose the message. io 
and employs the data codec 3806 to encode the 
obtained message and produce a data form suitable for 
digital telephone communication. Then, the resultant 
message is transmitted through the external interface 

3807 to the switch 801. is 
[1235] When a dosed message accompanied by a 
digital signature is received from the service providing 
system 110, the CPU 3800 receives that message 
through the external interface 3807. employs the data 
codec 3806 to decode the received message, and per- 20 
mits the ayptographic processor 3805 to decrypt the 
dosed and encrypted message and to verify the dgilal 
signature aocompcuiying the message. 

[1236] Data stored in the RAM 3802 will now be 
described. 25 
[1237] Fig. 39 is a specific diagram of a RAM map for 
data stored in the RAM 3802. 
[1238] The RAM 3802 is constituted by four areas: a 
fundamental program object area 3900, a service data 
area 3901. a work area 3902 and a temporary area 30 
3903. In the fundamental program object area 3900 are 
stored an upgraded module of a program stored in the 
ROM 3801 , a patch program and an additional program. 
The work area 3902 is a work area that the CPU 100 
employs when executing a program, arxj the temporary 35 
area 3903 is an area in which informaton received by 
the electronic telephone accounting macNne is stored 
temporarily 

[1 239] The service data area 390 1 is an ar ea in wNch 
are stored contract information for the electronic com- 40 
merce service, available telephone card informatkin and 
history information, and the data in this area are man- 
aged by the service providing system. The service data 
area 3901 is constituted by six sub-areas: a data man- 
agement information area 3904, a communk:ation serv- 4S 
ice provider information area 3905, a communication 
sen/ice provider's public key certificate area 3906, a 
communication service provider preference area 3907, 
an available telephone card list 3908 and a transaction 
list area 3909. so 
[1240] The data managennent information area 3904 
is an area in whfch is stored management information 
for data stored in the service data area 3901 ; the con> 
munication service provider information area 3905 is an 
area in which are stored the name of a connmunication ss 
service provider and information for the contents of a 
contract with a service provider; the communication 
service provider public key certificate area 3906 is an 


area in which a public key certificate for a conrvnunica- 
tion service provider is stored; the communication serv- 
ice provider preference area 3907 is an area in whk:h is 
stored preference information concerning the mobile 
electronic commerce service for a oomnunkation serv- 
ice provider; the available telephone card list area 3908 
is an area in which is stored list infomnation for those tel- 
ephone cards the communicatbn service provider can 
handle; and the transaction list area 3909 is an area in 
whrch is stored accounting history infonmation for com- 
munication performed (micro-check call) using an elec- 
tronic tetepfx>ne card. 

[1 241 ] The information stored in the service data area 
3901 will now be described in detail. 
[1242] Fig. 40 is a detailed, specific diagram showing 
the relatk>nships established for information stored in 
the service data area 3901 . 

[1243] The data management infonnation 3904 con- 
sists of eight types of information: a last data Lpdate 
date 4O00. a next data update date 4001 , an accounting 
machine status 4002. a communicatk>n service provkJer 
infomnation address 4003, a communk:ation service 
prcvkler public key certificate address 4004, a commu- 
nication servk;e provider preference address 4005, an 
availat)le telephone card list address 4006 and a trans- 
action list address 4007. 

[1 244] The last data update date 4000 represents the 
date on which the service providing system 110 last 
updated the data in the RAM 3802 and on the hard disk 
3803. and the next data update date 4001 represents 
the date on which the service prcvkling system 1 10 will 
next update the data in the service data area 3901 . The 
electronic telephone card accounting machine 800 
automatically initiates an update process when the time 
set according to the next data update date 4001 is 
reached. 

[1245] The accounting machine status 4002 repre- 
sents the status of the electronic telephone card 
accounting nnachine 800. The oommunicatkjn service 
provider information address 4003, the communicatwn 
service provider public key certificate address 4004, the 
communication service provider preference address 
4005. the available telephone card list address 4006 
and the transaction list address 4007 respectively rep- 
resent the first addresses for the areas in which are 
stored the communication service provider informatbn 
3905, the communication service provider pMiC key 
certificate 3906. the comrrtunk:ation servrce provkler 
preference information 3907, the available telephone 
card list 3908 and the transaction list 3909. 
[1 246] The availabi e telephone card list 3908 includes 
list informatk)n for telephone cards that can be handled 
by a communication service provider. 
[12471 In the available telephone card list 3908. for 
each telephone cand. seven types of informatkxi are 
entered: a cand name 4008, a card code 4009, a tele- 
phone card issuer ID 4010. a validity term 4011, an 
accounting machine private key 4012, a card public key 
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4013. and a telephone card accounting module address 

4014. The card name 4008 represents the name of a 
telephone card that the communication service provider 
can handle; the card code 4009 is code information that 
represents the type of electronic telephone card; the tel- 5 
ephone card issuer ID 4010 is ID information for a tele- 
phone card issuer; and the validity term 4011 is the 
period during which the electronic telephone card is 
valid. The accounting machine private key 4012 and the 
card public key 4013 are encryption keys that are w 
respectively paired with the accounting machine public 
key 2012 and the card private key 2011 for the elec- 
tronic telephone card. 

[1248] The telephone card accounting module 
address 4014 is an address on the hard disk 3803 at is 
which is stored a program module (a telephone card 
accounting module) for clearing the electronic tele- 
phone card. 

[1 249] In accordance with the contract entered into by 
the communication service provkJer and the servk^e zo 
providing system, the service providing system sets up 
or updates the contents of the available telephone card 
list 3908 in the data updating process. 
[1250] In the transactk)n list 3909, list information is 
stored to manage the history irrformation for sales 25 
through the mobile electronic commerce sen^ice. For 
one communicatk3n (mk»'o-check call) emptying an 
electronk; telephone card, in the tran8actk>n list 3909 
are stored four infonmation items: a transaction number 

4015. a service code 4016. a transactwn time 4017, 30 
and a transactk)n information address 4018. 

[1251] The transaction numt>er 4017 is a nurTt)er 
unk^uely kientifying a transaction performed with a user 
(from the view of the communication service provider): 
the service code 4016 is code information kientifyir^ 35 
the type of n)obtle electronic commerce service (micro- 
check call) that was provkled for the user; arxi the trans- 
action time 40 1 7 is time information for thefime at which 
the telephone card clearing process was performed. 
[1252] The transactbn information address 4018 is an 40 
address on the hard disk 3803 at which is stored a tele- 
phone micro-check that describes the contents of the 
charge and a receipt 

[1 253] An explanation will now be given for the digital 
signature process and the closing process performed 45 
by the mobile user terminal 100 when it generates a 
message to be transmitted to the gate temiinal 101 . the 
merchant terminal 102. the merchant temiinal 103, the 
automata vending machine 104, the switching center 
1 05, or the service provkJing system 110. so 
[1254] Since the digital signature process and the 
closing process are also performed in the same manner 
by the gate terminal 101. the merchant ternrinals 102 
and 103. the automatic vending machine 104, the 
switching center 105 and the service providing system ss 
110. the klentities of the characters in the following 
explanation are generalized by using the titles Mr. A and 
Mr. B. rather than the terms user, merchant and servfoe 


provider. 

[1255] In tiie digital signature processing, an elec- 
tronic signature is provkied for a message, while the 
characteristic of the cryptographic process is employed 
by using th;^ public key. "a message enaypted using a 
private key is decrypted only by using a public key that 
corresponds to that private key" 
[1256] Figs. 41 A and 41 B are a flowchart tor thedigital 
signature processing and a diagram for explaining it 
when a message (Message) is accompanied by the (£g- 
ital signature of Mr A. 

[1257] First, at st^ 4100. the CPU perfonns the hash 
function calculatfon for a message 4103. and generates 
a message digest 4104. "men. at step 4101. the CPU 
permits tiie ayptographic processor to erx:rypt the mes- 
sage digest 4104 using the private key of Mr. A, and to 
generate a digital signature 4105. At step 4102. ttie 
CPU adds the digital signature 41 05 to the original mes- 
sage 4103. Through the above processing, the CPU 
generates a message 4106 accompanied by the digital 
signature of Mr. A. 

[1258] Reference numeral 4106 in Fig. 41 B denotes a 
message accompanied by the digital signature of Mr. A. 
Hereinafter, in the drawings, the message accompanied 
by the digital signature is shown as indicated by 4106. 
[1 259] The closing processing will now be described. 
In the dosing process, the character of the crypto- 
graphic process using the public key. "a message 
enaypted using a private key is decrypted only by using 
a public key that corresponds to that private key," is 
employed to allow only a specific person to read the 
contents of the message. 

[1260] Figs. 42A and 42B are a ffowchart and a cfia- 
gram for explaining the processing performed when 
dosing a message that is accompanied by the digital 
signature of a Mr. A and when addressing it to a Mr. B. 
who is the recipient. 

[1261] First, at step 4200. the CPU employs a random 
number fundion to generate a seaet key 4204. which is 
a secret encryption key. Then, at step 4201. the CPU 
permits tiie cryptographic processor to encrypt the mes- 
sage 4106. which is accompanied by the digital signa- 
ture, by using the private key 4204. At step 4202. the 
CPU permits the cryptographic processor to encrypt tine 
secret key 4204 by using the piblic key of Mr. B, who is 
tiie recipient. At step 4203. tiie CPU adds the output 
4206 produced at step 4202 to the output 4205 pro- 
duced at step 4201 . Through the above processing, the 
CPU generates a closed message 4207 that is 
addressed to Mr. B. 

[1262] Reference numeral 4207 in Fig. 42B denotes a 
dosed message addressed to Mr. B. Hereinafter, in the 
drawings, tiie closed message is shown as is illustrated 
by 4207. 

[1263] An explanation will now t>e given for the 
processing performed to decrypt a dosed and 
encrypted message, and the processing performed for 
tiie examination of a digital signature by the mobile user 
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terminal 1 00. the gate terminal 1 01 , the merchant termi- 
nal 102, the merchant terminal 103. the automatic vend- 
ing machine 104, the switching center 105 or the 
sendee providing system 110 when the message is 
received from the service providing system. In the fol- 
lowing explanation, characters are also generalized. 
[1264] Figs. 43 A and 43B are a flowchart and a dia- 
gram for explaining the processing perfamed to decrypt 
a closed message addressed to Mr. B. 
[1265] First, at step 4300, the CPU separates a closed 
message 4302 addressed to Mr. B into a portion 4303, 
wherein the secret key is encrypted using the public key 
of Mr. B, and a message portion 4304 that is encrypted 
using the secret key. The CPU permits the crypto- 
graphic processor to employ the private key of Mr. B to 
decrypt tiie portion 4303 wherein the secret key is 
encrypted using the public key of Mr. B. and to extract 
the secret key 4305. Then, at step 4301 , the CPU per- 
mits the cryptographk; processor to employ the secret 
key 4305 to deaypt the message portion 4304 that is 
encrypted using the seaet key. Through the above 
processing, the closed message is decrypted. 
[1266] The digital signature examinatkxi process will 
now be described. 

[1267] Figs. 44A and 44B are a fkswchart and a dia- 
gram for explaining the processing perfbmDed when an 
examination of made of the cSgital signature of Mr. A. 
the sender, that accompanies a message. First, at step 
4400. the CPU performs a hash function calculation for 
the message portion (Message' 4403) in a message 
4306 accompanied by a digital signature, and gener- 
ates a message digest 4405. Then, at step 4401, the 
CPU permits the ayptographic processor to deaypt 
using the put)lic key of Mr A. a digital signature 4404 
accompanying tiie message 4306. At step 4402, the 
CPU compares the output 4405 at step 4400 with the 
output 4406 at step 4401 . When the contents match, the 
CPU ascertains that the verification has been success- 
ful. When the contents do not match, the CPU ascer- 
tains that a verification erra has occurred. Through the 
above processing, tiie digital signature examination 
process is performed. 

[1268] The processing perfonned by the service pro- 
viding system 1 10 will now be described. 
[1269] The service providing system 110 communi- 
cates with the mobile user tenronal 100. the gate termi- 
nal 101. the merchant terminal 102. the merchant 
terminal 103. the automatic vending machine 104, the 
switching center 105. the transaction processing sys- 
tem 106. the ticket issuing system 107, the payment 
card issuing system 108 and the telephone card issuing 
system 109, and serves as an agent for a user, a mer- 
chant, a communication service provkler. a transaction 
processor, a ticket issuer, a payment card issuer and a 
tel^hone card issuer while providing a mobile elec- 
tronic corrrmerce service for a user, a merchant and a 
communk^tion service provider. 
[1 270] in Fig. 45 is shown the process architecture for 


the service providing system 1 10. 
[1271] The service providing system 1 10 provides a 
mobile electronic commerce service through the coordi- 
nated performances of eight different processors: a 

5 user processor (UP) 4502, a merchant processor (MP) 
4502. a transaction process processor (TPP) 4504, a 
ticket issuer processor (TIP) 4505, a payment card 
issuer processor (PCIP) 4506, a telephone card issuer 
processor (TCIP) 4507, a service director processor 

10 (SDP) 4501, and a service manager processor (SMP) 
4500, all of which are generated in the service server 
900. 

[1272] In Fig. 45, the user processor 4502 has a one- 
to-one correspondence with the mobile user terminal 
15 100, and serves as an interface for communicatk>n 
between the service providing system 110 and the 
mobile user terminal 100. 

[1273] The merchant processor 4503 has a one-to- 
one con-espondence with the gate terminal 101, the 

20 merchant terminal 102, the merchant terminal 103. tiie 
automatic vendng machine 104 or the switching center 
105, and serves as an interface for communication 
between the service providing system 110 and tiie gate 
terminal 101, the merchant terminal 102, the merchant 

25 terminal 1 03, the automatic vending machine 1 04 or the 
switching center 105. 

[1274] The transaction process processor 4504 con^e- 
spends to the tiansaction processing system 106, and 
serves as an interface for communication between tiie 

30 service providing system 110 and the transaction 
processing system 106. The ticket issuing processor 
4505 corresponds to the ticket issuing system 107, and 
serves as an interface for communication between the 
service providing system 110 and the ticket issuing sys- 

35 tern 1 07. The payment card issuing processor 4506 cor- 
responds to the payment card issuing system 108, and 
serves as an interface for communication between the 
service providing system 110 and the payment card 
issuing system 108. The telephone card issuing proces- 

40 sor 4507 conesponds to the telephone card issuing sys- 
tem 109. and serves as an interface for communication 
between the service providing system 110 and the tele- 
phone card issuing system 109. 
[1275] The service director processor 4501 produces 

45 a mobile electronic commerce service by communicat- 
ing with the user processor 4502. the merchant proces- 
sor 4503. the transaction process processor 4504, tiie 
ticket issuer processor 4505. the payment card issuer 
processor 4506 and tiie telephone card issuer proces- 

50 sor 4507, The service manager processor 4500 man- 
ages the user processor, the merchant processor, the 
transaction process processor, the ticket issuer proces- 
sor, the payment card issuer processor and the tele- 
phone card issuer processor, and the sen^ice director 

55 processor in the system provkiing service 110. The 
meaning of the expression 'produces a personal renxrte 
aedit transaction service" will be described in detail 
later. 
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[1 276] The service providing system 1 1 0 may simulta- 
neously conrminlcate with a plurality of mot>ile user ter- 
minals and a plurality of gate terminals, merchant 
terminals (102 or 103). automatic vending machines 
and switching centers, may simultaneously process a 
plurality of mobile electronic commerce services, or 
may simultaneously communicate with a plurality of 
transaction processing systenrts. ticket issuing systems, 
payment cared issuing systems or telephone card issu- 
ing systems in order to process a plurality of mobile 
electronic commerce services. Accordingly, in the serv- 
ice server 900 there may be a plurality of user proces- 
sors, merchant processors, transaction process 
processors, ticket issuer processors, payment card 
issuer processors, telephone card issuer processors 
and service director processors. These processors are 
generated or deleted by the service manager (xocessor. 
[1 277] Wh&i the service server 900 is constituted by 
a plurality of computers, the user processor, the mer- 
chant processor, the transaction process processor, the 
ticket issuer processor, the payment card Issuer proces- 
sor, the telephone card Issuer processor and the serv- 
ice director processor are separately generated by the 
plurality of computers, so that the load imposed on an 
individual processor can be distritxited among the com- 
puters. 

[1 278] A set of cooperative processors for providing a 
single mobile electronic commerce service is deter- 
mined by the service manager processor and is com- 
posed of at least one processor selected from among 
the user, the merchant, the transaction, the ticket issuer, 
the payment card issuer and the telephone card issuer 
processors, plus one service director processor. The 
set of cooperating processes is called a process ^oup. 
[1 279] First, the user process 4502 will be desaibed. 
[1 280] The user process 4502 is a process for control- 
ling comnujnication with the mobile user terminal 100, 
for verifying users, for encrypting data to be trar^mitted 
to the mobile user terminal 100. for decrypting data 
received from the mobile user temiinai 100. for exanrtin- 
ing the validity of the data received from the mobile user 
terminal 100, and for preforming a remote access proc- 
ess, a data updating process, a forcible data updating 
process and a data backup process for the mobile user 
terminal 100. 

[1 281 ] The user process 4502 is generated by the per- 
fornvince of the service manager processor 4500 when 
the service providing system 110 communicates with 
the mobile user terminal 100. In the service manager 
process 4500, one user process 4502 is generated for 
one mobile user tenninal 100 that is communicating 
with the service providing system 110. 
[1282] In the user process 4502. permission Is pro- 
vided only for the accessing of attribute information for 
the owner (the user) of the mobile user terminal 100, 
which is managed by the user information server 902, 
and data stored in the RAM 1502 of the mobile user ter- 
minal 100. In other words, other information can not be 


accessed during the performance of the user process 
4502. 

[1283] One mobile user terminal 100 corresponds to 
one user process 4502, and the user process 4502 can 
5 . .effectively engage only its con-esponding mobile user 
terminal 100; it can not communicate c£rectiy witii 
another mot)ile user terminal. 
[1284] The merchant process 4503 will now be 
described. 

10 (1 285] The merchant process is a process for control- 
ling communication witii the gate terminal 101, the mer- 
chant temriinal 102, the merchant terminal 103, the 
automatic vending machine 104 and the switching 
center 105. for verifying a merchant, for encrypting data 

15 to be transmitted to the gate terminal 1 01 , the merchant 
terminal 102. the merchant terminal 103, the automatic 
vending nrtachine 104 and the switching center 105, for 
decrypting data received from the gate terminal 101 , the 
merchant terminal 102, tiie merchant tenninal 103, the 

20 automatic verxiing n^chine 104 and the switching 
center 105. for examining the validity of tiie data 
received from the gate terminal 101. the merchant ter- 
minal 102, the merchant terminal 103, the automatic 
vending machine 104 arxi the switching center 105, for 

25 preforming a data updating process or a forcible data 
updating process for the gate terminal 101, the mer- 
chant temninal 102, the merchant terminal 103, the 
autonnatic vending machine 104 and the switching 
center 105, for performing a renrKSte access process for 

30 the gate terminal 101, the merchant terminal 102 and 
the merchant 103, and for performing a data t>ackup 
process for the merchant terminal 103. 
[1286] The merchant process 4503 is generated by 
the performance of the sen^ice manager process 4500 

35 when the service providing system 110 comnxinicates 
with the gate terminal 101, the merchant terminal 102, 
tfie merchant terminal 103, the automatic vending 
machine 104 and the switching center 105. In the serv- 
ice manager process 4500, one merchant process 4503 

40 is generated for a gate terminal 101 , a merchant termi- 
nal 102, a merchant terminal 103. an automatic vending 
machine 104 or a switching center 105 that communi- 
cates with the service providing system 110. 
[1287] In the merchant process 4503. permission is 

45 provided only for the accessing of the attribute informa- 
tion for the merchant and the communication sen/tce 
provider, which are managed by the merchant informa- 
tion server 903, and data in tiie RAM and on the hard 
disk of the gate terminal 101, the merchant terminal 

so 102, the merchant terminal 103, tiie automatic vending 
machine 104 and the switcNng center 105. In other 
words, ottier information can not be accessed during 
the performance of the merchant process 4503. 
[1 288] One gate terminal 1 0 1 , one merchant terminal 

55 1 02, one merchant terminal 103, one automatic vending 
machine 104 or one switohing center 105 corresponds 
to one merchant process 4503, and the merchant proc- 
ess 4503 Is effective only for a corresponcfing gate ter- 


107 


213 


EP0950 968A1 


214 


minat 101. merchant terminal 102, merchant terminal 
103, automatic vending machine or suvitching center 
105; it can not communicate directly with another credit 
gate terminal, merchant terminal (102, 103), automatic 
vending machine or.swltching terminal. s 
[1289] The transaction processor process 4504 will 
now be de&crik)ed. 

[1290] The transaction processor process is a process 
for controlling commurvcation with the transaction 
processing system 106, for verifying a transaction proc- io 
essor, for ercrypting data to be transmitted to the trans- 
action processing system 106, tor decrypting data 
received from the transaction processing system 106, 
and for examining the validity of the data received from 
the transaction processing system 106. is 
[1291] The transaction processor process 4504 is 
generated by the service manager processor 4500 
when the service providing system 110 communicates 
with the transaction processing system 106. One trans- 
action processor process 4504 is generated to control 20 
oomnxinication across one communication line 
between the service providing system 110 and the 
transaction processing system 106. The digital commu- 
nication line 131 linking the sen^ice providing system 
1 1 0 and the transaction processing system 1 06 is multi- 2s 
plexed GO that it can serve as a plurality of communica- 
tion lines. To perform communication t)etween the 
service providing system 110 and the transaction 
processing system 106 across a plurality of comnuini- 
cation lines during the same period, the service man- 30 
ager process 4500 generates multiple transaction 
processor processes 4504 that are equivalent in 
number to the communication lines. 
[1292] In a transaction processor process 4504, per- 
mission is provided only for the accessing of the 35 
attribute information and transaction history information 
for the transaction processor in an area wherein is 
installed the transaction processing system 106 that is 
managed by the transaction processor infomnation 
server 904. In otiier words, other information can not be 40 
accessed during the performance of the transaction 
processor process 4504. 

[1293] The transaction processor process 4504 is 
effective only when employed with a corresponding 
transaction processing system 106, arxJ can not com- 45 
municate directly with another transaction processing 
system. 

[1294] The ticket issuer process 4505 will now be 
described. 

[1295] The ticket issuer process is a process for con- so 
trolling communication with the ticket issuing system 
107, for verifying a ticket issuer, for enaypting data to 
be transmitted to the ticket issuing system 107, for 
decrypting data received from the ticket issuing system 
107, and for examining the validity d the data received ss 
from the ticket issuing system 107. 
[1 296] The ticket issuer process 4505 is generated by 
the service manager processor 4500 when the service 


providing system 110 communicates with the ticket 
issuing system 107. One tk:ket issuer process 4505 is 
generated to control communication across one com- 
munication line between tiie service providing system 
1 10 and the ticket issuing system 107. The digital oom- 
munication line 132 linking the service providing system 
1 10 and the ticket issuing system 107 is multiplexed so 
that it can serve as a plurality of communication lines. 
To perform communication between the service provid- 
ing system 110 and the ticket issuing system 107 
aaoss a plurality of communication lines during the 
same period, the service manager process 4500 gener- 
ates multiple ticket issuer processes 4505 tfiat are 
equivalent in number to the communication lines. 
[1 297] In the ticket issuer process 4505, permissk)n is 
provided only for the accessing of attribute information 
and ticket issuance history information by the ticket 
issuer in the area wherein is installed the tk:ket issuing 
system 107 that is managed by the ticket issuer infor- 
mation server 905. In other words, other information can 
not be accessed during the performance of the ticket 
issuer process 4505. 

[1 298] The ticket issuer process 4505 is effective only 
when employed wrtii a corresponding ticket issuing sys- 
tem 107. and can not communicate directly with another 
ticket issuing system. 

[1 299] The payment card issuer process 4506 will r>ow 
bedescri3ed. 

[1 300] The payment card issuer process is a process 
for corrtrolling communication with the payment card 
issuing system 108, for verifying a payment card issuer, 
for encrypting data to be transmitted to the payment 
card issuing system 108. for decrypting data received 
from the payment card issuing system 108, and for 
examining the validity of the data received from the pay- 
ment card issuing system 108. 
[1 301 ] The payment card issuer process 4506 is gen- 
erated by the service manager processor 4500 wtien 
the service providing system 110 communicates with 
the payment card issuing system 108. One payment 
card issuer process 4506 is generated to conti'ol com- 
munication across one comnujnication line t>etween the 
service providing system 110 and the payment card 
issuing system 108. The digital communication line 133 
linking the service providing system 110 and the pay- 
ment card issuing system 108 is multiplexed so that it 
can serve as a plurality of communication tines. To per- 
form communication between the service providing sys- 
tem 110 artd tiie payment card issuing system 108 
aaoss a plurality of communication tines during the 
same period, the service manager process 4500 gener- 
ates multiple payment card issuer processes 4506 that 
are equivalent in number to the communication lines. 
[1 302] In the payment card issuer process 4506, per- 
mission is provided only for the accessing of the 
attribute information and payment card issuance history 
information by the payment card issuer in the area 
wherein is installed the payment card issuing system 
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108 that is managed by the payment card issuer infor- 
mation server 906. In other words, other information can 
not be accessed during the performance of the payment 
card issuer process 4506. 

[1 303] The payment card issuer process 4506 is effec- 
tive only when employed with a con-esponding payment 
card issuing system 108, and can not communicate 
directly with another payment card issuing system. 
[1304] The telephone card issuer process 4507 will 
now,bedesaibed. 

[1305] The telephone card issuer process is a process 
for controlling communication with the telephone card 
issuing system 109. for verifying a telephone card 
issuer, for encrypting data to be transmitted to the tele- 
phone card issuing system 109, for deaypting data 
received from the telephone card issuing system 109, 
and for examining the validity of the data received from 
the telephone card issuing system 109. 
[1306] The telephone card issuer process 4507 is 
generated by the service manager processa 4500 
when the service providing system 110 communicates 
with the telephone card issuing system 109. One tele- 
phone card issuer process 4507 is generated to control 
communication across one communication line 
between the sen^ice providing system no and the tele- 
phone card issuing system 109. The digrtal communica- 
tion fine 134 linking the service providing system 110 
and the telephor>e card issuing system 109 is multi- 
plexed to serve as a plurality of communication lines. To 
perform communication between the service providing 
system 110 and the telephone card issuing system 109 
across a plurality of communication lines during the 
same period, the service manager process 4500 gener- 
ates multiple telephone card Issuer processes 4507 that 
are equivalent in number to the communication lines. 
[1 307] In the telephone card issuer process 4507, per- 
mission is provided only for the accessing of the 
attribute infonration and the telephone card issuance 
histay inlDrmation for the telephone card issuer in the 
area wherein is installed the telephone card issuing sys- 
tem 109 that is managed by the telephone card issuer 
information server 907. In other words, other informa- 
tion can not be accessed during the performance of the 
telephone card issuer process 4507. The telephone 
card issuer process 4507 is effective only when 
employed with a corresponding telephone card issuing 
system 109, and can not communicate directly with 
another telephone card issuing system. 
[1 308] The service director process 4501 will now be 
desaibed. 

[1309] The service director process Is a process for 
communicating with the user process, the merchant 
process and the transaction processor process that 
belong to the same group, and for producing the mobile 
electronic commerce service. The expression "produc- 
ing the mobile electronic commerce service** means that 
the service director process cooperates with the other 
member processes in the same process group, and 


takes the initiative in perfaming the processing for the 
mobile electronic commerce service. 
[1310] The service director processor 450 1 is gener- 
ated by the service manager process 4500 when the 

5 .service providing system 110 performs various proc- 
esses for a mdbWe electronic commerce service. A 
specified processing sequence is errployed for tfie indi- 
vidual processes for performing the mobile electronic 
commerce service. In accordance with the processing 

10 sequence, a message received t>y the performance of a 
member process in the same group is handled, and a 
message requesting a process to be performed is trans- 
mitted to each member process. Upon receiving the 
message via the service director process 4501 , a mem- 

15 ber process performs a corresponding process. Since 
the service director process cooperates with the other 
member processes in the same group, the processing 
for the electronic mobile commerce servk:e can be per- 
formed. 

20 [1311] To purchase an electronic ticket, the sen^k^e 
director process, the user process, the tkiiet issuer 
process and the transaction processor process are 
assembled into one process group. To purchase an 
electrons payment card, the servkie director process. 

25 the user process, the payment card issuer process arxi 
the transaction processor process are assembled into 
one process group. And to purchase an electronk; tele- 
phone card, the service director process, the user proc- 
ess, the telephone card issuer process arxl the 

30 transactkxi processor process are assembled into one 
process group. 

[1312] In the service director process 4501. permis- 
sion is provided only for the accessing of the information 
that is managed by the service director information 

35 server 901. and infer matran that a member process in 
the same group is permitted to access. In other words, 
other information can not be accessed during the per- 
fomnance of the service director process 4501. 
[1 31 3] The service manager process 4500 will now be 

40 desaibed. 

[1314] The service manager process is a process for 
generating or deleting the user process 4502. the mer- 
chant process 4503, the transaction processor process 
4504, the ticket issuer process 4505, the payment card 

45 issuer process 4505, the telephone card issuer process 
4505 and the service director process 4501, and for 
generating or deleting a process group. 
[1 315] The service manager process 4500 is always 
activated when the service providing system provides 

50 the mobile electronic commerce service. The genera- 
tion and deletion of the servk:e manager process is con- 
trolled by the management system 407. 
[1 316] In the service manager process 4500, permis- 
sion is provided only for the accessing of information 

55 that is managed by the service director information 
server 901. 

[1317] In other wads, other information can not be 
accessed during the performance of the service man- 
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ager process 4500. 

[1318] The information stored in the user information 
server 902 of the service providing system 110 will now 
be explained. 

[1319] The user information server 902 manages the 
user attribute information and the data in the RAM 1502 
of the mobile user terminal 100. 
[1 320] Rg. 46 is a specific diagram showing informa- 
tion stored for each user in the user information server 
902. 

[1321] The user information server 902 stores 14 
types of information for each user: user data manage- 
ment information 4600. personal information 4601 . por- 
trait image data 4602, a user public key certificate 4603. 
a terminal property 4604. user preference 4605. access 
control Information 4606. terminal data 4607. telephony 
Information 4608. a credit card list 4609. a ticket list 
4610. a payment card list 4611. a telephone card list 
4612. and a use list 4613. 

[1322] The user data management Information 4600 
Is management infomiation for data to be stored for 
each user in the user information server 902. 
[1323] The personal informatfon 4601 is InfomDation 
concerning a user, such as the age, the date of birth, the 
occupation, the account number and the terms of a con- 
tract, and one part of this infamation corresponds to the 
personal information 1706 of the mobile user terminal 
100. 

[1324] The portrait image data 4602 are data for the 
portrait of a user; the user public key certificate 4603 is 
a certificate for the public key of a user; and the terminal 
property 4604 is attribute information for the mobile user 
terminal 100. such as the model nuvrber of the mobile 
user terminal 100, the serial numt)er. the memory 
capacity of a RAM and the version of a stored program. 
[1325] The user preference 4605 is preference infor- 
mation concerning the mobile electronic commerce 
service, and corresponds to the user preference 1 709 in 
the mobile user terminal 100. 
[1326] The access control information 4606 is infor- 
nration set by the user concerning the access control for 
user information and associated information; the termi- 
nal data 4607 are data in the RAM 1502 in the mobile 
user terntinal 100; the telephony information 4608 is 
infonnation concerning a digital wireless telephone, and 
corresponds to the telephony infonnation 1710 of the 
nKsbile user terminal 100. 

[1327] The aedit card list 4609 is list Informatfon for 
credit cards registered by a user; the ticket list 4610 is 
list Infonnation for electronic tickets owned by a user; 
the payment card list 461 1 is list infomiation for pay- 
ment cards owned by a user; tiie telephone card list 
4612 is list information for electronic telephone cards 
owned by a user; and the use list 4613 is use history 
information for the nrrabile electronic commerce service. 
[1328] The user data management information 4600 
consists of 18 types of information: a user name 4614. 
a user ID 4615, a user status 4616. a personal Infonna- 


tion address 4617, a portrait image data address 4618. 
a user public key certificate address 4619. a terminal 
property address 4620. a user preference address 
4621, an access control information address 4622. a 

5 last tpdate date 4623. a next update date 4624, a termi- 
nal data address 4625. a telephony information address 
4626, a credit card list address 4627. a ticket list 
address 4628. a payment card list ^ress 4629. a tele- 
phone card list address 4630. and a use list address 

10 4631. 

[1329] The user status4616 indicates tiie status of the 
mobile user terminal 100, and conresponds to the termi- 
nal status 1602 of the mobile user terminal 100. The last 
update date 4623 provides the last date on which tiie 

15 data in the service data area 1 701 of the mobile user 
terminal 100 were updated; and tiie next update date 
4624 provides tiie date on which the data in the service 
data area 1701 will be updated next. These dates corre- 
spond to the last update date 1800 and the next update 

20 date 1801 of the mobile user terminal 100. 

[1330] The personal information address 4617, tiie 
portrait image data address 4618. the user public key 
certificate address 4619, tiie terminal property address 
4620. the user preference address 4621, tiie access 

25 control information address 4622, tiie terminal data 
address 4625, the telephony information address 4626, 
tiie credit card list address 4627, tiie ticket list address 
4628, tiie payment card list address 4629. tiie tele- 
phone card list address 4630, and the use list address 

30 4631 describe addresses in the user information server 
902 at which are respectively stored the personal infor- 
mation 4601, the portrait image data 4602. the user 
public key certificate 4603, tiie terminal property 4604. 
the user preference 4605. the access control informa- 

35 Hon 4605. the terminal data 4607, the telephony infor- 
mation 4608. the credit card list 4609, the ticket list 
461 0. the payment card list 461 1 . the telephone card list 
4612. and tiie use list 4613. 

[1331] The terminal data 4607 are data stored in tiie 

40 RAM 1502 of tiie mobile user terminal 100 when tiie 
updating process was previously performed, and are 
used for data comparison during the next data updating 
process and are also employed as backup data. 
[1332] The credit card list 4609. tiie ticket list 4610, 

45 the payment card list 461 1 , the telephone card list 4612 
and tiie use list 4613 correspond to tiie credit card list 
1711. the ticket list 1712, the payment card list 1 713, tiie 
telephone card list 1714 and tiie use list 1715 of tiie 
mobile user terminal 100. An object data address 4623. 

50 an electronic ticket address 4648. an electronic pay- 
ment card address 4654, an electronic telephone card 
address 4660 and a user informatfon address 4665 are 
addresses In tiie user information server 902. 
[1333] The information stored in the merchant Infor- 

55 mation server 903 of the service providing system 1 10 
will ncMf be explained. 

[1 334] The merchant information server 903 manages 
attribute information for a merchant or a communication 
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service provider, and data stored in the RAMs and on 
the hard disks of the gate terminal 101. the merchant 
terminal 102, the merchant terminal 103, the automatic 
vending machine 104 (accounting machine 3455) and 
the switching center .105 (electronic telephone card ^ .5. . 
accounting machine 800). 

[1335] Rg. 47 is a specific diagram showing informa- 
tion stored tor each merchant in the merchant informa- 
tion server 903. 

[1 336] For each gate terminal 101. each merchant ter- 10 
minal 102, each merchant terminal 103, each automatic 
vending machine 104 (accounting machine 3455) or 
each witching center 105 (electronic telephone card 
accounting machine 800). the merchant information 
server 903 stores 14 types of information: merchant is 
data management Information 4700. merchant informa- 
tion 4701, a public key certificate 4702. a system prop- 
erty 4703. merchant preference 4704. memory data 
4705, disk data 4708, telephony information 4707. an 
available credit card list 4708. an available payment so 
card list 4709, an available telephone card list 4710. a 
ticket list 471 1, a transaction list 4712, and an authori- 
zation report list 4713. 

[1337] The merchant data management information 
4700 is management information for data to be stored in 2s 
the merchant information server 903 for each gate ter- 
minal 101, each merchant terminal 102. each merchant 
terminai 103, each automatic vending machine 104 
(accounting machine 3455) or each switching center 
105 (electronic telephone card accounting machine 30 
800). 

[1338] The merchant infbrmatfon 4701 is information 
concerning a merchant or a communication service pro- 
vider, such as an address, an account number and the 
terms of a contract and one part of this infonmation cor- 35 
resporxis to the merchant information in the gate termi- 
nal 101. the merchant terminal 102, the merchant 
tenninal 103 or the automatic vending machine 104 
(accounting machine 3455). or the communication senr- 
ice provkler information 4005 in the switching center 4C 
105 (electronic telephone accounting machine 800). 
[1339] The public key certificate 4702 is a certificate 
for the public key of the merchant or the communication 
service provider: and the system property 4703 is 
attribute information for the gate terminal 101. the mer- 4S 
chant terminal 102. the merchant terminal 103 or the 
automatic vending machine 104 (accounting machine 
3455), or the switching center 105 (electronic telephone 
accounting machine 800), such as a model number, a 
serial number, the memory capacity of a RAM, the so 
memory capacity of a hard disK and the version of a 
stored program. 

[1340] The merchant preference 4704 is preference 
information concerning a merchant or a communication 
senfice provider for the nxibile electronic comma*ce 55 
sen^ice. and corresponds to the merchant preference in 
the gate terminal 101, the merchant terminal 102. the 
merchant terminal 103 or the automatic vending 


machine 104 (accounting. machine 3455). or the com- 
munication service provider information 3906 in the 
switching center 105 (electronic telephone accounting 
machine 800). 

[1341] The menwy data 4705 are data in the RAM of 
the gate terminal 101, the merchant terminal 102, the 
merchant terminal 103, the automatic vending machine 

104 (accounting machine 3455) or the switching center 

105 (electronic telephone accounting machine 800), or 
data on a hard disk in the merchant terminal 102 or the 
switohing center 1 05 (electronic telephone card 
accounting deice 800). 

[1 342] The telephony information 4707 is information 
concerning a digital telephone and a digital wireless tel- 
ephone, and corresponds to the telephony information 
2808 of the merchant terminal 102 or the telephony 
information 3208 of the n>erchant terminal 103. 
[1343] The available credit card list 4708 is list Infor- 
mation for those aedit cards the merchant can handle; 
the available payment card list 4709 is list information 
for those payment cards the merchant can handle: the 
available telephone card list 4710 is list information for 
those telephone cards the merchant can handle; and 
the ticket list 471 1 is list informatfon for those electronic 
tickets the merchant sets up as tk:kets to be examined. 
[1344] The transaction list 4712 is history information 
for the mobile electronic commerce service. The author- 
ization report list 4713 is a list of authorizations for the 
electrons payment card, the electronic telephone card 
and the electronic ticket 

[1345] The merchant data management information 
4700 consists of 19 types of information: a merchant 
name (or communication service provider name) 4714. 
a merchant ID (communication service provider ID) 
4715, an accounting machine ID (gate ID) 4716. a mer- 
chant status 4717, a merchant information address 
4718, a merchant public key certificate address 4719. a 
system property address 4720, a merchant preference 
address 4721. a last update date 4722. a next update 
date 4723. a memory data address 4724. a disk data 
address 4725. a telephony information address 4726. 
an available credit card list address 4727, an available 
payment card address 4728, an available telephone 
card address 4729, a ticket list address 4730, a ti-ansac- 
tion list address 4731, and an autiiorization report list 
address 4732. 

[1 346] The merchant status 471 7 indicates tiie status 
of the gate terminal 101, the merchant terminal 102, the 
merchant terminal 103, the automatic vending machine 

104 (accounting machine 3455) or the switching center 

105 (electronic telephone accounting machine 800), 
and con-esponds to the terminal status of the gate temii- 
nal 101 , the merchant terminal 102 or the mercfiant ter- 
minal 103, or the accounting machine status of the 
automatic vending machine 104 (accounting machine 
3455) or tiie witching center 105 (electi^onic telephone 
card accounting machine 800). 

[1347] The last update date 4722 provkJes the last 
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date on which the data in the service data area were 
updated; and the next update date 4723 provides the 
date on which the data in the service data area will be 
updated next. These dates correspond to the last 
update date and the next update date of the gate termi- _ 5 . 
nal 101, the merchant terminal 102, the merchant termi- 
nal 1 03. the automatic vending machine 1 04 
(accounting machine 3455) or the switching center 105 
(electronic telephone accounting machine 800). 
[1348] The merchant information address 4718, the 10 
public key certificate address 4719. the system property 
address 4720, the merchant preference address 4721 , 
the memory data address 4724, the telephony informa- 
tion address 4726. the available credit card list address 
4727, the available payment card list address 4728, the is 
available telephone card list address 4729. the ticket list 
address 4730. the transaction list address 4731 and the 
authorization report list address 4732 irxJicate 
addresses In the merchant information server 903 at 
which are stored respectively the merchant information 20 
4701. the public key certificate 4702, the system prop- 
erty 4703. the merchant preference 4704. the memory 
data 4705, the disk data 4706. the telephony infomia- 
tion 4707, the credit card list 4708, the payment card list 

4709. the telephone card list 4710, the ticket list 471 1 , 25 
the transaction list 4712 and the authorization report list 
4713. 

[1349] The available credit card list 4708, the available 
payment card list 4709. the available telephone card list 

4710. the ticket list 471 1 , the transaction list 4712 and 30 
the authorization report list 4713 con^espond to the 
aedit card list, the payment card list the telephone card 
list 3908. the ticket list 2409, the transaction list and the 
authorization report list of the gate terminal 101. the 
merchant terminal 102, the merchant terminal 103, the 35 
automatic vending machine 104 (accounting machine 
3455) or the switching center 105 (electronic telephone 
accounting machine 800). The service code list 
address, the credit card clearir^g program address, the 
payment card clearing module address, the telephone 40 
card clearing program address, the ticket examination 
module address, the transaction information address 
and the authorization report address indicate those in 
the merchant infonmtion server 903. 
[1 350] The information stored in the transaction proc- 4S 
essor information server 904 of the service providing 
system 110 will now be explained. 
[1351] The transaction processor information server 
904 manages attribute information for the transaction 
processor and the transaction histay informatton. so 
[1352] Rg. 48 is a specific diagram showing informa- 
tion stored for each transaction processa in the trans- 
action processor information server 904. 
[1353] The transaction processor information server 
904 stores five types of information for each transaction 55 
processor: transaction processor data management 
infbmiation 4800. transaction processor information 
4801, a transaction processor public key certificate 


4802. an availat>le credit card list 4803 and a clearing 
list 4804. 

[1354] The transaction processor data management 
information 4800 is management information for data to 
be stored tor each transaction processor in the transac- 
tion processor information server 904. The transaction 
processor information 4801 is information concerning a 
transaction processor, such as an address, an account 
number and the terms of a contract; the transaction 
processor public key certificate 4802 is a certificate for 
the piMic key of the transaction processor; the available 
aedit card list 4803 is list information for crecfit cards the 
transaction processor can handle; and the clearing list 
4804 is clearing history information for the mobile elec- 
tronic commerce sen/ice. 

[1355] The transaction processor data management 
information 4800 consists of seven types of information: 
a transactfon processor name 4805. a transaction proc- 
essor ID 4806. a transaction processor status 4807, a 
transaction processor information address 4808, a 
transaction processor public key certrfk;ate address 
4809. an available credit card list address 4811 and a 
clearing list address 481 1 . 

[1356] The transaction processor status 4807 pro- 
vides the service status in the settlement process of the 
transaction processing system 106. The transactfon 
processor information address 4808, the transactfon 
processor public key certificate address 4809, the avail- 
able credit card list address 4810 and the clearing list 
address 481 1 provide the addresses in the transaction 
processor information server 904 at which respectively 
are stored the transaction processor information 4801, 
the transaction processor puk)lic key certificate 4802. 
the credit card list 4803 and the clearing list 4804. 
[1357] In the available aedit card list 3102, two types 
of information are entered for each credit card: a credit 
card name 4812 and a service code list address 4813. 
[1358] The credit card name 4812 represents the 
name of a credit card that the transaction processor can 
handle, and the service code list address 4813 is an 
address of the transaction processor information server 
904 at which is stored a service code list that shows the 
types of services that can be provided by the transac- 
tion processor when the credit card is used. 
[1359] In the clearing list 4803, four types of informa- 
tion are stored for clearing one aedit transaction serv- 
ice: a clearing number 4814, a service code 4815. a 
clearing time 4816, and a clearing information address 
4817. 

[1360] The clearing nunrt^er 4814 uniquely represents 
the aedit card clearing process, and the service code 
4815 is a code number that describes the type of credit 
card service that is provided for the user The clearing 
time 4816 is the time at which the credit transactfon 
service is cleared, and the clearing information address 
4817 is an address of the transaction processor infor- 
mation server 904 at which is stored a clearing oomple- 
tfon notification issued by the transaction processing 


112 


223 


EP0950 968A1 


224 


system 106. 

[1 361 ] The information stored in the ticket issuer infor- 
mation server 905 of the service providing system 110 
will now be explained. 

[1362] The ticket issuerinformation server 905 man- s 
ages the attribute information for the ticket issuer and 
the ticket issuing history information. 
[1 363] Rg. 49 is a specrftc diagram showing informa- 
tion stored in the ticket issuer information server 905 for 
each ticket issuer. io 
[1 364] The ticket issuer information server 905 stores 
eight types of information for each ticket issuer: ticket 
issuer data management information 4900, ticket issuer 
information 4901. a ticket issuer public key certificate 
4902. a sen/ice code list 4903, an installation card list is 
4904. an electronic ticket template list 4905, a transac- 
tion list 4906, and a us^e report list 4907. 
[1 365] The ticket issuer data management information 
4900 is management information for data for each ticket 
issuer that is to be stored in the ticket issuer information 20 
server 905; the ticket issuer information 4901 is informa- 
tion concerning a ticket issuer, such as an address, an 
account number and the terms of a contract; the ticket 
issuer public key certificate 4902 is a certifk^ate for the 
public key belonging to a ticket issuer; the service code ss 
list 4903 is a list of service codes indicating tiie type of 
sen^ice provided by a ticket issuer; the installation card 
list 4904 is list information for the installatk>n card num- 
bers of electronic ticket installation cards Issued t>y a 
ticket issuer; the electronic ticket template list 4905 is 30 
management information for a template program for an 
electronic ticket that corresponds to a ticket issued by a 
ticket issuer; the transaction list 4906 is ticket issuing 
history information for a ticket issuer; and the usage 
report list 4907 is management information for a usage 35 
report that the service providing system 110 issued tiie 
ticket issuing system 107. 

[1 366] The ticket issuer data management information 
4900 consists of ten types of information: a ticket issuer 
processor name 4908. a ticket issuer ID 4909. a ticket 4o 
issuer status 4910. a ticket issuer information address 
491 1 . a ticket issuer pUblic key certificate address 4912, 
a service code list address 4913, an installation card list 
address 4914, an electronic ticket template list address 
4915. a transaction list address 4916 and a usage 4s 
report list address 491 7. 

[1367] The XkMeX issuer status 4910 specifies the 
sen^ice status in the settiement process of the ticket 
issuing system 107. The ticket issuer information 
address 4911, the ticket issuer public key certificate so 
address 4912. the service code list address 4913. the 
installation card list address 4914. the electronic ticket 
template list address 4915, the transaction list address 
4916 and the usage r^ort list address 4917 represent 
addresses in the ticket issuer information server 905 at 55 
which respectively are stored the ticket issuer informa- 
tion 4901, tiie ticket Issuer public key certificate 4902, 
the service code list 4903. the installation card list 4904, 


the electronic ticket template list 4905. the transaction 
list 4906 or the usage report list 4907. 
[1368] The electronic ticket tenplate program is a 
model for an electronic ticket issued by tiie service pro- 
viding system, and is registered in advance in the ticket 
issuer information server 905 in accordance with the 
contract entered into by the ticket issuer and the service 
provider. To issue an electmnic ticket, the service pro- 
viding system enploys tiie template program desig- 
nated by tiie ticket issuing system to generate an 
electronic ticket, and transmits the tk:ket to the mobile 
user terminal. 

[1369] The electronic template list 4905 includes five 
information items for one type of electronic ticket tem- 
plate program: a template code 4918. a transaction 
module address 4919. a representation module 
address 4920. a default representative component 
address 4921 . and a tk;ket examination module address 
4922. 

[1370] The template code 4918 is code information 
describing the type of electronfo ticket template pro- 
gram. The transaction module address 4919 is an 
address in the ticket issuer infbrmatfon server 905 at 
which is stored a program module that is the transaction 
module 1930 for an electronic ticket that is generated. 
The representation module address 4920 is an address 
in the ticket issuer information server 905 at which is 
stored a program module that is the representation 
module 1931 for an electronic ticket that Is generated. 
The default representative corrponent address 4921 is 
an address in tiie ticket issuer informatfon server 905 at 
which default information is stored. The ticket examina- 
tion module address 4922 is an address in the ticket 
issuer information server 905 at which is stored a ticket 
examination module for examining an electronic ticket 
that is generated. And the ticket examination module is 
a program module that corresponds to tiie transaction 
module. 

[1 371 ] The electronic tfoket issuing oommission 4903. 
which is a message by which the ticket issuing system 
requests that tiie service providing system request the 
issuance of an electronic ticket, includes not only ticket 
information, such as the date of an event and a seat 
number, but also a template code that specifies a tem- 
plate program and representative component informa- 
tion. The service providing system generates an 
electronic ticket using the transaction module and the 
representation module specified by the template code, 
and tiie representative conrponent information that is 
included in the electronic ticket issuing commission. 
[1372] Before the template program is registered in 
the ticket issuer informatfon server 905, the operation 
and the safety of the mdbWe electronic commerce sys- 
tem are confirmed. Since several tenrplate progranK 
are stored in advance, the ticket Issuer can safely Issue 
a ticket that performs varfous operatfons. as well as tick- 
ets of various designs. The procedures for issuing an 
electronic ticket will be described in detail later 
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[1 373] The transaction list 4906 includes four types of 
information tor one ticket order or one ticket purchase: a 
transaction number 4923, a service code 4924, a trans- 
action time 4925, and a transaction information address 
4926. s 
[1374] The transaction number 4923 uniquely repre- 
sents the ticket order process and the ticket purchase 
process; the service code 4924 represents the type of 
service provided by the ticket issuing system; the trans- 
action time 4925 represents the time at which the ticket io 
order process or the ticket purchase process was per- 
formed; and the transaction information address 4926 is 
an address in the ticket issuer information server 905 at 
which is stored a ticket order response or a receipt that 
was issued by the ticket issuing system 107. is 
[1375] The usage report list 4907 is management 
information for the usage report 7100 that the service 
providing system 1 1 0 issued to the ticket issuing system 
1 07. and comprises a list of the usage report addresses 
4927 that are located in the ticket issuer information 20 
server 905 in which the usage r^xMts are stored. 
[1376] The information stored in the payment card 
information server 905 of the service provkjing system 
110 will now be explained. 

[1377] The transaction processor informatk)n server 2S 
904 manages attribute information for the transaction 
processor and the transactton histay informatbn. 
[1378] The information stored in the payment card 
issuer infonnation server 906 of the service providing 
system 110 will now be explained. 30 
[1379] The payment card issuer information server 
906 manages the attrftxjte information for the payment 
card issuer arxi ttie payment card issuing history infor- 
mation. 

[1380] Fig. 50 is a specifk; diagram showing tnforma- 35 
tkin stored in the payment card issuer information 
sender 906 for each payment card issuer. 
[1381] The payment card issuer informatbn server 
906 stores eight types of infonmatkin for each payment 
card issuer: payment card issuer data management 40 
infonnation 5000, payment card issuer information 
5001 , a payment card issuer public key certificate 5002, 
a service code list 5003. an installation card list 5004. 
an electronic payment card tenplate list 5005, a trans- 
action list 5006. and a usage report list 5007. 45 
[1382] The payment card issuer data management 
information 5000 is management information for data 
for each payment card issuer that is to be stored in the 
payment card issuer information server 906; the pay- 
ment card issuer information 5001 is information con- so 
ceming a payment card issuer, such as an address, an 
account number and the terms of a contract; the pay- 
ment card issuer pi^k; key certificate 5002 is a certifi- 
cate for the putilic key t>elonging to a payment card 
issuer: the service code list 5003 is a list of service ss 
codes indicating the type of service provided by a pay- 
ment card issuer; the installation card list 5004 is list 
information for the installatbn card numbers of elec- 


tronic payment card installation cards issued by a pay- 
ment card issuer; the electronic payment card template 
list 5005 is management information tor a template pro- 
gram for an electronic payment card that oon-esponds to 
a payment card issued by a payment card issuer; the 
transaction list 5006 is paymerrt card issuing history 
information for a payment card issuer; and the usage 
report list 5007 is management information for a usage 
report that the service providing system 1 10 issued the 
payment card issuing system 108. 
[1383] The payment card issuer data management 
information 5000 consists of ten types of information: a 
payment card issuer processor name 5008, a payment 
card issuer ID 5009. a payment card issuer status 5010, 
a payment card issuer information address 501 1 , a pay- 
ment card issuer public key certificate address 5012, a 
service code list address 5013, an installation card list 
address 5014, an elect-onic payment card template list 
address 5015, a transaction list address 5016 and a 
usage report list address 5017. 
[1384] The payment card issuer status 5010 specifies 
the service status in the issuance process of the pay- 
ment card issuing system 108. The payment card issuer 
information address 50 1 1 , the payment card issuer pub- 
lic key certificate address 5012. the service code list 
address 5013, the installation card list address 5014, 
the electronic payment card template list address 5015. 
the transaction list address 5016 and the usage report 
list addriBss 5017 represent addresses in the payment 
card issuer information server 906 at which respectively 
are stored the payment card issuer information 5001, 
the payment card issuer public key certificate 5002, the 
service code list 5003, the installation card list 5004, the 
electronic payment card template list 5005, the transac- 
tion list 5006 or the usage report list 5007. 
[1 385] The electronic payment card template program 
is a nrxxiel for an electronic payment card issued by the 
service provkiing system, and is registered in advance 
in the payment card issuer irtfomnation server 906 in 
accordance with tiie contract entered into by the pay- 
ment card issuer and the service provider. To issue an 
electronic payment card, the service provkjing system 
errploys the template program designated by the pay- 
ment card issuing system to generate an electronic pay- 
ment card, and transmrts the payment card to the 
mobile user terminal. 

[1386] The electronic template list 5005 includes five 
information items for one type of electronic payment 
card template program: a template code 5018. a trans- 
action module address 5019, a represerrtation module 
address 5020. a default representative component 
address 5021, and a payment card clearing module 
address 5022. 

[1387] The terrplate code 5018 is code informatkin 
descrft^ng the type of electronic payment card terrplate 
program. The transactksn module address 5019 is an 
address in the payment card issuer information server 
906 at which is stored a program module that is the 
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transaction module 2030 for an electronic payment card 
that is generated. The representation nxxJule address 
5020 is an address in the payment card issuer informa- 
tion server 906 at which is stored a program module that 
is the representation module 2031 for an electronic pay- 5 . 
ment card that is generated. The default representative 
conponent address 5021 is an address in the payment 
card Issuer information server 906 at which default infor- 
mation is stored. The payment card clearing nmxlule 
address 5022 is an address in the payment card issuer w 
Information server 906 at which is stored a payment 
card clearing nKxJule for clearing an electronic payment 
card that is generated. And the payment card clearing 
module is a program module that corresponds to the 
transaction nrxxJule. 75 
[1388] The electronic payment card issuing commis- 
sion 6203, which is a message by which the payment 
card issuing system requests that the service providing 
system request the issuance of an electronic payment 
card, includes not only payment card information, such 20 
as the face value of the payment card that is Issued and 
the usage condition, but also a template code that spec- 
ifies a terrplate program and representative component 
information. Tlie service providing system generates an 
electronic payment card using the transaction module 25 
and the representation nmlule specrfied by the tem- 
plate code, and the representative component informa- 
tion tiiat is included in the electronic payment card 
issuing commission. 

[1389] Before the template program is registered in 30 
the payment card issuer information server 906. the 
operation and the safety of the mobile electronic com- 
merce system are confirmed. Since several template 
programs are stored in advance, the payment card 
issuer can safely issue a payment card that performs 3S 
various operations, as well as payment cards of various 
designs. The procedures for issuing an electronic pay- 
ment card will be described in detail later. 
[1 390] The transaction list 5006 includes four types of 
information for one payment card issuance: a transac- 40 
tion number 5023. a service code 5024. a transaction 
time 5025, and a transaction information address 5026. 
[1391] The transaction number 5023 uniquely repre- 
sents the payment card issuance process; the service 
code 5024 represents the type of service provided by 45 
the payment card issuing system; the transaction time 
5025 represents the time at which the payment card 
issuance process was performed; and the transaction 
information address 5026 is an address in the payment 
card issuer information server 906 at which is stored a so 
receipt that was issued the payment card issuing 
system 108. 

[1392] The usage report list 5007 is management 
information for tiie usage report that the service provid- 
ing system 1 10 issued to the payment card issuing sys- 55 
tem 108. and comprises a list of the usage report 
addresses 5027 that are located in tiie payment card 
issuer information sender 906 in which tiie usage 


reports 5704 are stored. 

[1393] The information stored in the telephone card 
issuer information server 907 of the sen^ice providing 
system 110 wilt now be explained. 
[1394] Thfr telephone card issuer information server 
907 manages the attribute information for the telephone 
card issuer and the telephone card issuing history infor- 
mation, f^g. 51 is a specific diagram showing informa- 
tion stored in the telephone card issuer information 
server 907 for each telephone card issuer. 
[1395] The telephone card issuer information server 
907 stores eight types of information for each telephone 
card issuer: telephone card issuer data management 
irrformation 5100, telephone card issuer information 

5101. a telephone card issuer public key certificate 

5102. a service code list 5103. an installation card list 
5104. an electronic telephone card terrplate list 5105. a 
transaction list 5106. and a usage report list 5107. 
[1396] The telephone card issuer data management 
information 5100 is management Information for data 
for each telephone card Issuer that is to be stored in tiie 
telephone card issuer information server 907; the tele- 
phone card issuer information 5101 Is information con- 
cerning a telephone card Issuer, such as an address, an 
account number and the terms of a contract; the pay- 
ment card issuer public key certificate 5102 is a certifi- 
cate for the public key belonging to a telephone card 
issuer; the service code list 5103 is a list of sen^ice 
codes indicating the type of service provkled by a tele- 
phone card issuer; the installation card list 5104 is list 
information for tiie installation card numbers of elec- 
ti^onic telephone card installation cards issued by a tele- 
phone card issuer; the electronic telephone card 
tenplate list 5105 is management information for a tem- 
plate program for an electronic telephone card that cor- 
responds to a telephone card issued by a telephone 
card issuer: the transaction list 5106 is telephone card 
issuing histay information for a telephone card Issuer; 
and the usage report list 5107 is management informa- 
tion for a usage report that the service providing system 
110 issued the telephone card issuing system 109. 
[1397] The telephone card issuer data management 
information 5100 consists of ten types of information: a 
telephone card issuer processor name 5108. a tele- 
phone card issuer ID 5109, a telephone card issuer sta- 
tus 5110. a telephone card issuer information address 
5111, a telephone card issuer public key certificate 
address 5112. a service code list address 5113. an 
installation card list address 5114. an electi^onic tele- 
phone card template list address 51 1 5, a transaction list 
address 51 1 6 and a usage report list address 5117. 
[1398] The telephone card issuer status 51 10 speci- 
fies the service status in the issuance process of the tel- 
ephone card issuing system 107. The telephone card 
Issuer information address 5111, the telephone card 
Issuer public key certificate address 5112. the senrice 
code list address 51 13. the installation card list address 
5114, tiie electronic telephone card template list 
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address 51 1 5, the transaction list address 51 1 6 and the 
usage report list address 5117 represent addresses in 
the telephone card issuer inforniation server 907 at 
which respectively are stored the telephone card issuer 
... information 5101, the telephonacaod issuer public key 
certificate 5102, the service code list 5103. the installa- 
tion card list 5104, the electronic telephone card tem- 
plate list 5105, the transaction list 5106 or the usage 
report list 5107. 

[1399] The electronic telephone card template pro- io 
gram is a model for an electronic telephone card issued 
t)y the service providing system, and is registered in 
advarx:e in the telephone card issuer information server 
907 in accordance with the contract entered into by the 
telephone card issuer and the service provider. To issue )S 
an electronic telephone card, the service providng sys- 
tem employs the tenpiate program designated by the 
telephone card issuing system to generate an electronic 
telephone card, and transmits the telephone card to the 
mobile user terminal. 20 
(1 400] The electronic template list 51 05 includes five 
inforniation items for one type of electronic telephone 
card template program: a template code 51 18, a trans- 
action module address 5119. a representation nrKxlule 
address 5120, a default representative component 25 
address 5121, and a telephone card clearing nrKxJurie 
address 5122. 

[1401] The template code 51 18 is code inforniation 
describing the type of electronic telephone card tem- 
plate program. The transaction module address 51 1 9 is 30 
an address in the telephone card issuer information 
server 907 at which is stored a program module that is 
the transaction module 2030 for an electronic telephone 
card that is generated. The representation nrxxluie 
address 5120 is an address in the telephone card Issuer 35 
information server 907 at which is stored a program 
module that is the representation module 2031 for an 
electronic telephone card that is generated. The default 
representative component address 5121 is an address 
in the telephone card issuer information sender 907 at 4q 
which default information is stored. The telephone card 
clearing module address 5122 is an address in the tele- 
phone card issuer information server 907 at which is 
stored a telephone card clearing module for clearing an 
electronic telephone card that is generated. And the tel- 4S 
ephone card clearing module is a program nxxSule that 
con^esponds to the transaction module. 
[1402] The electronic telephone card issuing commis- 
sion 6203. which is a message by which the telephone 
card issuing system requests that the service providing so 
system request the issuance of an electronic telephone 
card, includes not only telephone card information, such 
as the face value of the telephone card that is issued 
and the usage condition, but also a template code that 
specifies a template program and representative com- 55 
ponent information. The service providing system gen- 
erates an electronic telephone card using the 
transaction nuxiule and the representation module 


specified by the template code, and the representative 
component infonnation that is included in the electronic 
telephone card issuing commission. 
[1403] Before the template program is registered in 
the telephone card issuer information server 907. the 
operation and the safety of the mobile electronic com- 
merce system are confirmed. Since several template 
programs are stored in advance, the telephone card 
issuer can safely issue a telephone card that performs 
various operations, as well as telephone cards of vari- 
ous designs. The procedures for issuing an electronic 
telephone card will be described in detail later. 
[1 404] The transaction list 51 06 includes four types of 
information for one telephone card issuarK:e: a transac- 
tion numt>er 5123. a service code 5124. a transaction 
time 5125, and a transaction information address 5126. 
[1405] The transaction r^jmber 5123 uniquely repre- 
sents the telephone card issuance process; the service 
code 5124 represents the type of service provided by 
the telephone card issuing system: the transaction time 
5125 represents the time at which the telephone card 
issuance process was performed: and the transaction 
infomiation address 5126 is an address in the tele- 
phone card issuer information server 907 at which is 
stored a receipt that was issued by the telephone card 
issuing system 109. 

[1406] The usage report list 5107 is management 
information for the usage repat that the service provid- 
ing system 110 issued to the telephone card issuing 
system 109. and comprises a list of the usage report 
addresses 5127 that are located in the telephone card 
issuer information server 907 in which the usage 
reports 5704 are stored. 

[1407] The information stored in the service director 
information server 901 in the service providing system 
1 10 will now be explained. 

[1408] The service director information server 901 
stores ten types of information: a user list 5200, a mer- 
chant list 5201, a transaction processors list 5202. a 
ticket issuers list 5203. a payment card issuers list 5204, 
a telephone card issuers list 5205. a provided service 
list 5206, electronic ticket management information 
5300, electronic payment card management informa- 
tion 5400, and electronic telephone card management 
information 5500. 

[1409] Figs. 52A to 52G are specific diagrams show- 
ing the user list 5200, the merchant list 5201 . the trans- 
action processors list 5202. the ticket issuers list 5203, 
the payment card issuers list 5204, the telephone card 
issuers list 5205 and the provided service list 5206. all 
of which are in the service director informatfon server 
901. Figs. 53 to 55 are specific diagrams respectively 
showing the electronic ticket management information 
5300 stored for one type of electronic ticket, the elec- 
tronic payment card management information 5400 
stored for one type of electronic payment card, and the 
electronic telephone card management informatfon 
5500 stored for one type of electronic telephone card. 
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[1410] The user list 5200 is a list of attribute informa- 
tion for the mobile user terminals that have entered into 
contracts with a service provider; the merchant list 5201 
is a list of attribution information for the gate tenninats, 
the merchant tem^nals (102 or 103), the automatic 
vending machines (accounting machines) and the 
switching centers (electronic telephone card accounting 
machines) that have entered into contracts with the 
service provider: the transaction processors list 5202 is 
a list of the attribution information for all the transaction 
processors that have entered into contracts with the 
service provider; the ticket issuers list 5203 is a list of 
attrbution information for all the ticket issuers who have 
entered into contracts with the service provider; the pay- 
ment card issuers list 5204 is a list of attribution informa- 
tion for all the payment card issuers who have entered 
into contracts with the service provider; the telephone 
card issuers list 5205 is a list of attribution information 
fa all the telephone card issuers who have entered into 
contracts with the service provider; the provided service 
list 5203 is a list of information for nxsbile electronic 
commerce service that has been provided by the serv* 
ice providing system 1 10; the electronic ticket manage- 
ment information 5300 is mar^ement information for a 
registered electronic ticket; the electronic payment card 
management information 5400 is management informa- 
tion for a registered ^ectronic payment card; and the 
electronic telephone card management information 
5500 is management information for a registered elec- 
tronic telephone card. 

[1411] In the user list 5200, six types of information 
are stored for each mot^ile user terminal: a user name 
5207, a user ID 5208, a user telephone number 5209. a 
user public key certificate address 5210, an available 
service list address 5211, and a user information 
address 5212. 

[1412] The user public key certificate address 5210 is 
an address at which a certificate for the put>lic key of a 
user is stored; the available service list address 521 1 is 
an address at which a list of service codes that the user 
can employ is stored; and the user information address 
5212 is an address at which the user data management 
information 4600 for the pertinent user is stored. 
[1413] In the merchant list 5201 , seven types of infor- 
mation are stored for each gate terminal, each mer- 
chant terminal (102, 103), each automatic vending 
machine (accounting machine) or each switching center 
(electronic telephone card accounting machine): a mer- 
chant name (communication service provider name) 
5213. a merchant ID (communication servrce provider 
ID) 5214, an accounting rriachine ID (gate ID) 5215. a 
merchant telephone number 5216. an available service 
list address 5217, a customers table address 5218, and 
a merchant informatfon address 5219. 
[1414] The available senrice list address 5217 is an 
address at which is stored a list of the service codes 
that the merchant or the service communication pro- 
vider can handle. The customers table address 5218 is 


the address at which is stored table information (a cus- 
tomer table) that represents the con-espondence cred- 
ited to the customer number and the user ID. And the 
merchant information address 5219 is an address at 

5 which the merchant data management information 4700 
for the pertinent merchant is stored. 
[1415] In the transaction processors list 5202 five 
types of information are stored for each transaction 
processor: a t-ansaction processor name 5220. a trans- 

10 action processor ID 5221 , a transaction processor com- 
munication ID 5222, an available service list address 
5223, and a transaction processor information address 
5224. 

[1416] The transaction processor comnrrunication ID 

15 5222 is an ID for the transaction processing system 106 
used when the service providing system 110 communi- 
cates witii the transaction processing system 106 via 
tiie digital communication line 131. The availat>le serv- 
foe list address 5223 is an address at which is stored a 

20 list of s^ce codes that the transaction processor can 
handle. And the transaction processor information 
address 5224 is an address in the transaction processor 
information server 904 at which is staed the transaction 
processor data management information 4800 for the 

25 pertinent transaction processor. 

[1417] tn the ticket issuers list 5203 seven types of 
information are stored for each ticket issuer: a ticket 
issuer name 5225, a ticket issuer ID 5226. a ticket 
issuer communication ID 5227. an available sendee list 

30 address 5228. an installation card list address 5229. a 
customers table address 5230. and a ticket issuer infor- 
mation address 5231. 

[1418] The ticket issuer communication ID 5227 is an 
ID for the ticket issuing system 107 used when the serv- 

35 ice providing system 110 communicates with the ticket 
issuing system 107 via the digital communication line 
132. The available service list address 5228 is an 
address at which is stored a list of service codes that 
the ticket issuer can handle. The installation card list 

40 address 5229 is an address in the service director infor- 
mation server 901 at which is stored a list of installation 
card numbers for electronic ticket installation cards that 
are issued by the ticket issuer. The customer table 
address 5230 is an address in the service director infor- 

45 mation server 901 at which is stored table information (a 
customer table) that represents the correspondence 
credited to the customer number and tiie user ID. And 
tiie ticket issuer information address 5231 is an address 
in the ticket issuer information server 905 at which is 

so stored the ticket issuer data management information 
4900 for the pertinent ticket issuer. 
[1419] In tiie payment card issuers list 5204 seven 
types of information are stored for each payment card 
issuer: a payment card issuer name 5232, a payment 

55 card issuer ID 5233. a payment card issuer communk^a- 
tion ID 5234. an available service list address 5235, an 
installation card list address 5236. a customers table 
address 5237, and a payment card issuer information 
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address 5238. 

[1420] The payment card issuer communication ID 
5234 is an ID for the payment card issuing system 108 
used when the service providing system 1 10 communi- 
cates with the payment card issuing system 1 08 via the s 
digital communication line 133. The avaWatHe service list 
address 5235 is an address at which is stored a list of 
service codes that the payment card issuer can handle. 
The installation card list address 5236 is an address in 
the service director information server 901 at which is io 
stored a list of installation card numbers for electronic 
payment card installation cards that are issued by the 
payment card issuer. The customer table address 5237 
is an address in the service director information server 
901 at which is stored table information (customer table) is 
that represents the correspondence credited to the cus- 
tomer number and the user ID. And the payment card 
issuer information address 5238 is an address in the 
payment card issuer information server 906 at which is 
stored the payment card issuer data management infor- so 
mation 5000 for the pertinent payment card issuer. 
[1421] In the telephone card issuers list 5205 seven 
types of information are stored for each tel^hone card 
issuer: a telephone card issuer name 5239, a telephone 
card issuer ID 5240, a telephone card issuer communi- 2S 
cation ID 5241 , an available service list address 5242, 
an installation card list address 5243, a customers table 
address 5244. and a telephone card issuer information 
address 5245. 

[1422] The telephone card issuer communication ID 3o 
5241 is an ID tor the telephone card issuing system 109 
used when the service providing system 110 communi- 
cates with the telephone card issuing system 109 via 
the digital communication line 134. The available serv- 
ice list address 5242 is an address at which is stored a 35 
list of service codes that the telephone card issuer can 
handle. The installation card list address 5243 is an 
address in the service directa information server 901 at 
which is stored a list of installation card nun^rs for 
electronic telephone card installation cards that are 40 
issued by the telephone card issuer. The customer table 
address 5244 is an address in the service director infor- 
mation server 901 at which is stored table information (a 
customer table) that represents the correspondence 
credited to the customer numk>er and the user ID. And 45 
the telephone card issuer information address 5246 is 
an address in the telephone card issuer infomiation 
server 907 at which is stored the telephone card issuer 
data management information 51 00 for the pertinent tel- 
ephone card issuer. so 
[1423] In the provided service list 5206 four types of 
information are stored for each occasion on which the 
mobile electronic commerce service was provided: a 
service providing number 5246. a service code 5247, a 
service providing time 5248, and a provided service ss 
infonration address 5249. 

[1424] The service providing number 5246 uniquely 
represents the process performed by the sen^ice provid- 


ing system 1 10 on an occasion when service was pro- 
vided. The service code 5247 is code information 
indicating the type of service provided. The service pro- 
viding time 5248 is the time at which the motile elec- 
tronic commerce service was provided. And the 
provided service information address 5249 is an 
address in the service director information server 901 at 
which is stored history information for the processes 
performed by the service providing system 110 on an 
occasion when service was provided. 
[1425] The electronic ticket management intbrn^tion 
5300 is nrtanagement irrformation that is stored in the 
service director information server 901 for one type of 
electronic ticket. 

[1426] In Fig. 53. 13 types of information are stored in 
the electronic ticket management information 5300: a 
ticket name 5304. a ticket code 5305. a ticket issuer ID 
5306. a validity term 5307. a ticket private key 5308. a 
ticket public key 5309. a gate private key 5310. a gate 
public key 531 1 . a template code 5312, a management 
term 5313. a user list address 5314. a merchant list 
address 5315, and a registered ticket list address 5316. 
[1427] The ticket name 5304 is infomiation provkjing 
the name of an electronic ticket, the tk^ket code 5305 is 
code irtformatk)n describing the type of electronic tk:ket. 
the ticket issuer ID 5306 is ID information for a ticket 
issuer, and the valkltty term 5307 is the perk)d during 
which an electronic ticket is valid. The ticket private key 
5308 and the tcket public key 5309 are a pair of keys 
that are employed to authorize an electronk: ticket in the 
tk:ket examination process, and the gate private key 
5310 and the gate pitslic key 531 1 are a pair of keys 
that are enployed to authorize a gate terminal in the 
tki^ examination process. The service providing sys- 
tem employs the ticket private key 5308 arxi the gate 
public key 5311 to issue an electronk: tktet and 
employs the ticket putriic key 5309 and the gate private 
key 53 1 0 to set up an electronic ticket for examinatk>n at 
the gate terminal. 

[1428] The template code 5312 is code informatk)n 
that descrA:>es an electronic ticket template program 
and is used to generate an electronic ticket. The man- 
agement term 5313 is a period during which the elec- 
tronic tkH^et management information 5300 is managed 
by the service director information server 901. That is, 
when the nrtanagement term 5313 expires, information 
in the electronic ticket management information 5300 is 
shifted to a management form or a storage medium for 
which a lower cost is assessed. 
[1 429] The user list address 53 1 4 is an address in the 
service director irrformation server 901 at which is 
stored the user list 5301 for a user who owns the perti- 
nent electronic ticket. And the user list 5301 is list infor- 
mation in which two information entries, a ticket ID 531 7 
and a user ID 5318 identifying the owner of the tkitet. 
are made for one electronic ticket. 
[1430] The merchant list address 5315 is an address 
in tiie service director information senrer 901 at whk:h is 
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Stored the merchant list 5302 identifying a merchant 
who is permitted to examine the electronic ticket And 
the merchant list 5302 is list information for the mer- 
chant ID 5319 assigned to a nrerchant who is permitted 
to examine the electronic ticket 5 
[1431] When the contents of a ticket are to be mo6\- 
tied, the user list 5301 and the merchant list 5302 are 
refen-ed to in order to specify the owner of the ticket or 
the merchant who has set up the ticket examination 
module. io 
[1432] The registered ticket list address 5316 is an 
address in the service director information server 901 at 
which the registered ticket list 5303 for registered elec* 
tronic tickets is stored. The registered ticket list 5303 is 
list information, for electronic tickets that have been reg- is 
islered, in which are stored seven types of information: 
a ticket ID 5320, an initial ticket examinatfon number 
5321. a user ID 5322, a user public key 5323, a regis- 
tered ticket certificate address 5324, a ticket examina- 
tion response list address 5325. and a former user so 
informatfon address 5326. 

[1433] The user ID 5321 and the user public key 5323 
are an ID and a publk; key for a user (the owner of an 
electronic ticket) who has registered an electronic tk:ket 
(tiie ticket ID 5320). The initial ticket examination 2s 
number 5321 is the initial value of the ticket examination 
number for an electronic ticket. And the registered ticket 
certificate address 5324 is an address in the service 
director information server 901 at which a registered 
ticket certificate for an electronic ticket is stored. 30 
[1434] The initial ticket examinatton nun^r 5321 is 
an ariyitmry number that the service providing system 
sets before issuing an electronic ticket. The ticket exam- 
ination number is inaemented each time the ticket 
exanrvnation process is performed. In the ticket reler- 35 
ence process, the service providing system employs the 
ticket examination nunft>er to examine the ticket status 
11103 and tiie variable ticket information 11104 tiiat 
have been modified to determine whetiier tiiey match. 
[1 435] In tiie ticket reference process, first, tiie service 4o 
providing system examines the registered Xkket list 
5303 to detennine whether the electi^onic ticket has 
been registered. Then, tiie service providing system 
enrploys ttie user pttolic key 5323 to examine the user 
digital signature in the ticket examination response 4s 
6703, and employs tiie registered ticket certificate to 
examine tiie ticket digital signature in tiie ticket exami- 
nation response 6703. Furtiier, the service providing 
system enploys the ticket examination number to 
examine tiie ticket status 1 1 103 and tiie variable ticket so 
information 1 1 104 tiiat have been modified to determine 
whetiier they match. 

[1436] The ticket examination response list address 
5325 is an address in tiie service director information 
sender 901 at which is stored list information for a ticket ss 
examination response (a ticket examination response 
tiiat is uploaded to the service provkiing system in tiie 
ticket referme process). 


[1437] The former user information address 5326 is 
an address in the service director information server 
901 at which is stored former user information 5327 
concerning a preceding owner (user) of the electronic 
ticket. When an electronic ticket that is registered is 
transfen^ed to anotiier user, the service providing sys- 
tem updates tiie registered ticket list 5303 to reflect tiie 
new user information, and the M user information is 
managed as tiie former user infamation 5327. 
[1438] The former user information 5327 consists of 
five types of irtformatfon: a user ID 5328, a user public 
key 5329. a registered ticket certificate address 5330. a 
ticket examinatfon response list address 5331, and a 
formei^ user information address 5332. These 
addresses correspond respectively to the user ID 5322. 
tiie user public key 5323, tiie registered ticket certifk:ate 
address 5324, the ticket examination response list 
address 5325 and tiie famer user infomiatfon address 
5326. all of whk;h are in the registered ticket list In addi- 
tion, when another owner preceded the present owner, 
tiie former user information address 5332 is an address 
of the former user information for tiie pertinent owner. 
[1439] That is, when tiie electronic ticket that is regis- 
tered is tiansferred. the user ID 5322. tfie user put)lic 
key 5323, the registered ticket oertif k;ate address 5324. 
tiie ticket examination response list address 5325 and 
tiie former user information address 5326 are updated, 
and at the former user information address 5326, tiie 
informatfon stored in tiiose portions before the updating 
is pointed to as tiie former user information 5327 
[1440] Since tiie electx)nic ticket Is managed in tiie 
above descrit>ed manner, the usage corxiition of the 
electronic ticket can be precisely understood even when 
it is transferred. 

[1 441 ] The el ectronic payment management informa- 
tion 5400 is management information that is stored in 
tiie service director information server 901 for one type 
of electronic payment card. 

[1442] In Fig. 54. 12 types of information are stored in 
tiie electronic payment card management information 
5400: a card name 5403. a card code 5404, a payment 
card issuer ID 5405. a validity term 5406. a card private 
key 5407. a card public key 5408. an accounting 
machine private key 5409. an accounting machine pub- 
lic key 5410, a template code 5411. a management 
term 5412. a merchant list address 5413, and a regis- 
tered card list address 5414. 

[1443] The card name 5403 is information providing 
tiie name of an electronic payment card, the card code 
5404 is code information describing the type of elec- 
tronic payment card, the payment card issuer ID 5405 is 
ID information for a payment card issuer, and the validity 
term 5406 is the period during which an electi^onic pay- 
ment card is valid. The card private key 5407 and tiie 
card publfo key 5408 are a pair of keys that are 
employed to autfiorize an electronic payment card in tiie 
payment card clearing process, and the accounting 
machine private key 5409 and tiie accounting machine 
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public key 5410 are a pair of keys that are employed to 
authorize the merchant terminal 102 or 103 or the auto- 
matic vending machine 104 in the payment card clear- 
ing process. The service providing system employs the 
card private key 5407 and the accountirig machine pub- 
lic key 5410 to issue an electronic payment card, and 
employs the card public key 5408 and the accounting 
machine private key 5409 to set up an electronic pay- 
ment card that a merchant handles at the merchant ter- 
minal 102 or 103 or the automatic vending machine 
104. 

[1444] The template code 5411 is code infomiation 
that descri3es an electronic payment card template pro- 
gram and is used to generate an electronic payment 
card. Ihe management term 5412 is a period during 
which the electronic payment card management infor- 
mation 5400 is managed by the service director infor- 
mation server 901 . That is. when the management term 
5412 expires, information in the electronic payment card 
management inlbrmation 5400 is shifted to a manage- 
ment form or a storage medium for which a kwver cost is 
assessed. 

[1445] The merchant list address 5413 is £m address 
in the service director information server 901 at which is 
stored the merchant list 5401 klentifying a merchant 
who is permitted to use the electronk; payment card. 
And the merchant list 5401 is list information fa the 
m^chant ID 5415 assigned to a merchant who is per- 
mitted to handle the electronic payntent card. 
[1446] The registered card list address 5414 is an 
address in the service drrecta information server 901 at 
whk;h the registered card list 5402 for regist^ed elec- 
tronic payment cards is stored. The registered card list 
5402 is list informatnn, for electronic payment cards 
that have been registered, in which are stored seven 
types of information: a card ID 5416. an initial micro- 
check issuing number 541 7. a user ID 5418. a user pub- 
Ik; key 5419. a registered card certificate address 5420. 
a micro-check list address 5421. and a former user 
information address 5422. 

[1447] The user ID 5418 and the user public key 5419 
are an ID and a public key for a user (the owner of an 
electronic payment card) who has registered an elec- 
tronic payment card (the card ID 5416). The initial 
micro-check issuing numt>er 5417 is the initial value of 
the mksro-check issuing number for an electronic pay- 
ment card. And the registered card certificate address 
5420 is an address in the service director information 
server 901 at which a registered card certifrcate for an 
electronic payment card Is stored. 
[1448] The initial micro-check issuing number 5417 is 
an arbitrary number that the service providing system 
sets before issuing an electronic payment card. The 
micro-check issuing number is incremented each time 
the payment card clearing process is performed (each 
time the micro-check is issued). In the payn^ card ref- 
erence process, the service provkJing system enploys 
the micro-check Issuing number to examine the amount 


of payment 1 1303. the card status 1 1304 and the total 
remaining value 11305 that have been modified to 
determine whether they match. 
[14491 In the payment card reference process, first. 

J5 the service.^roviding system examines the registered 
card list 5402 to determine whether the electronic pay- 
ment card has been registered. Then, the service pro- 
viding system employs the user public key 5419 to 
examine the user digital signature in the micro-check. 

10 and emptoys the registered card certificate to examine 
the card digital signature in the miao-check. Further, 
the service providing system entploys the mkro-check 
issuing nunrtoer to examine the amount of paymerrt 
11303. the card status 11304 and the total remaining 

15 value 11305 that have been modified to determine 
whether they match. 

[1450] The micro-check list address 5421 is an 
address in the service director information server 901 at 
which is stored list information fa a mkro-check (a 

20 micro-check that is uploaded to the service provkiing 
system in the payment card reference process). 
[1451] The former user information address 5422 is 
an address in the service director informatk>n server 
901 at whk^h is stored former user informatk)n 5423 

25 concerning a preceding owna (user) of the electronic 
payment card. When an electronic payment card that is 
registered is transferred to another user, the sen/ice 
provkiing system updates the registered card list 5402 
to reflect the new user inforrnatk)n, and the oti user 

30 information is managed as the former user infornrtatk>n 
5423. 

[1452] The former user informatkin 5423 consists of 
five types of irrformation: a user ID 5424. a user public 
key 5425. a registered card certificate address 5426. a 
35 mcro-check list address 5427, and a former user infor- 
nr^tion address 5428. These addresses correspond 
respectively to the user ID 5418, the user public key 

5419. the registered card certificate address 5420, the 
mk:ro-check list address 5421 and the former user infor- 

40 mation address 5422. all of which are in the registered 
card list. In addition, when another owner preceded the 
present owner, the former user infamation address 
5428 is an address of the former user information for the 
pertinent owner. 

45 [1453] That is. when the electronic payment card that 
is registered is transfen-ed. the user ID 5418. the user 
public key 5419, the registered card certificate address 

5420. the miao-check list address 5421 , and the fonmer 
user information address 5422 are updated, and at the 

50 former user infamation address 5422. the infbrmatron 
stored in those portions befae the updating is pointed 
to as the famer user information 5423. 
[1454] Since the electronic payment card is managed 
in the above descrbed manner, the usage condition of 

55 the electronic payment card can be precisely under- 
stood even when it is transferred. Thus, even when the 
transfer of an electronic payment card that is partially 
used is permitted, the safety of the system is not deteri- 
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orated. 

[1455] The electronic telephone management infor- 
mation 5500 is management information that is stored 
in the service director information server 901 for one 
type of electronic telephonecard. 
[1456] In Fig. 55, 12 types of information are stored in 
the electronic telephone card management information 
5500: a card name 5503, a card code 5504. a telephone 
card issuer ID 5505, a validity temn 5506, a card private 
key 5507, a card pxMic key 5508, an accounting 
machine private key 5509, an accounting machine pub- 
lic key 5510, a template code 5511. a management 
term 5512. a communication service provider list 
address 5513, and a registered card list address 5514. 
[1457] The card name 5503 is information providing 
the name of an electronic telephone card, the card code 

5504 is code Information descrltiing the type of elec- 
tronic telephone card, the telephone card issuer ID 

5505 is ID Infornnation for a telephone card Issuer, and 
the validity term 5506 is the perkxl during which an 
electrons telephone card is valid. The card private key 
5507 and the card public key 5508 are a pair of keys 
that are employed to auttiorize an electronic telephone 
card In the tel^hone card clearing process, and the 
accounting machine private key 5509 and the account- 
ing machine public key 5510 are a pair of keys that are 
employed to authorize the electronic telephone card 
accounting machine 800 in the telephone card clearing 
process. The sen^lce providing system employs the 
card private key 5507 and the accounting machine pub- 
lic key 5510 to Issue an electronic telephone card, and 
errploys the card public key 5508 and the accounting 
machine private key 5509 to set up an electronic tete* 
phone card tfiat a communication service provider han- 
dles at the electronic telephone card accounting 
machine 800. 

[1458] The template code 5511 Is code information 
that descrbes an electronic telephone card template 
program and is used to generate an electronic tele- 
phone card. The management term 5512 is a period 
during which the electronic telephone card manage- 
ment Information 5500 Is managed by the service direc- 
tor information server 901. That is. when the 
management term 5512 expires, Information In the elec- 
tronic telephone card management Information 5500 Is 
shifted to a management form or a storage medium for 
which a lower cost is assessed. 
[1459] The communication service provider list 
address 5513 is an address in the service director infor- 
mation server 901 at which is stored the communication 
sen^lce provider list 5501 identifying a communication 
sen^lce provider who is permitted to handle the elec- 
tronic telephone card. And the communrcatlon service 
provider list 5501 is list Information for the communica- 
tion service provider ID 5515 assigned to a communica- 
tion servk:e provider who is pa^nnitted to handle the 
electronic telephone card. 

[1460] The registered card list address 5514 is an 


address in the service director Information server 90 1 at 
which the registered card list 5502 for registered elec- 
tronic telephone cards is stored. The registered card list 
5502 is list information, for electronic telephone cards 

5. .that-havfi been, registered, In which are stored seven 
types of information: a card ID 5516, an initial micro- 
check issuing number 551 7. a user ID 551 8, a user pub- 
lic key 5519. a registered cand certificate address 5520, 
a telephone micro-check list address 5521. and a 

10 former user information address 5522. 

[1461] The user ID 5518 and the user public key 5519 
are an ID and a public key for a user (the owner of an 
electronic telephone card) who has registered an elec- 
tronic telephone card (the card ID 5516). The initial 

15 micro-check Issuing number 551 7 is the Initial value of 
the micro-check issuing number for an electronic tele- 
phone card. And the registered cand certificate address 
5520 is an address In the service director information 
server 901 at which a registered card certificate for an 

20 electronic telephone card Is stored. 

[1462] The Initial mlao-check issuing number 5517 is 
an arbitrary nun^er that the service providing system 
sets before issuing an electronic telephone card. The 
micro-check issuing number is increniented each time 

25 the telephone card clearing process Is performed (each 
time the telephone micro<heck Is issued). In the tele- 
phone card reference process, the sendee providing 
system employs the micro-check Issuing number to 
examine the amount of payment 1 1303. the card status 

30 11304 and the total remaining value 11305 that have 
been nxxlif ied to determine whether they match. 
[1463] In the telephone card reference process, first, 
the service providing system examines the registered 
card list 5502 to determine whether the electronic tele- 

35 phone card has been registered. Then, the service pro- 
viding system employs the user public key 5519 to 
examine the user digital signature in the telephone 
micro-check, and employs the registered card certifi- 
cate to examine the card digital signature in the tele- 
ga phone miCTO-check. Further, the servtee providing 
system employs the micro-check Issuing nunrt)er to 
examine the amount of payment 11 303, the card status 
11304 and the total remaining value 11305 that have 
been nxxlif led to determine whether they match. 

45 [1464] The telephone micro-check list address 5521 is 
an address in the service director Information server 
901 at which is stored list Inlonnation for a telephone 
micro-check (a telephone micro-check tfiat is uptoaded 
to the service providing system in the telephone card 

so reference process). 

[1465] The former user information address 5522 is 
an address in the service director information server 
901 at which Is stored former user Information 5523 
concerning a preceding owner (user) of the electronic 

55 telephone card. When an electronic telephone card that 
is registered Is transferred to another us&, the service 
providing system updates the registered card list 5502 
to reflect the new user Information, and the oki user 
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information is managed as the fomier user information 
5523. 

[1466] The former user Information 5523 consists of 
five types of Information: a user ID 5524. a user public 
- key 5525, a registered card certificate address 5526, a 6~ 
micro-check list address 5527. and a former user infor- 
mation address 5528. These addresses correspond 
respectively to the user ID 5518, the user pii^lic key 

5519, the registered card certificate address 5520. the 
micro-check list address 5521 and the former user infer- io 
mation address 5522, ail of which are in the registered 
card list. In addition, when anotiier owner preceded the 
present owner, the former user information address 
5528 is an address of the former user Infornnation for the 
pertinent owner. is 
[1 467] That is. when the electronic telephone card that 

is registered is transferred, the user ID 5518, the user 
put)lic key 5519, the registered card certificate address 

5520. the miao-check list address 5521 , and the former 
user information address 5522 are updated, and at the 20 
former user informatkin address 5522, the information 
stored in those portk)ns before the updating is pointed 

to as the former user information 5523. 
[1468] Since the electronic telephone card is man- 
aged in the Bbove described manner, the usage condi- ss 
tk)n of the electronic telephone card can be precisely 
understood even when it Is transferred. Thus, even 
when the transfer of an electronic telephone card that is 
partially used is permitted, the safety of the system is 
not deteriorated. 30 
[1469] A detailed explanation will now be given for the 
contents of messages that are exchanged by deuces, 
and the operations performed by the individual devices 
during the mobile electronic commerce service 
processing. 35 
[1470] First, an explanation will be given for the con- 
tents of messages that are exchanged by devices, and 
the operations performed by the devices during the indi- 
vkiual processes performed for network hierarchlat stor- 
age and management 40 
[1471] An e)qpIanation wilt now be given for tiie con- 
tents of messages that the mobile user terminal 100, 
the gate terminal 101. the merchant temiinal 102 and 
the merchant terminal 103 exchange with the service 
providing system 110 in the renx>te access process. 45 
The remote access process is a process lor the down- 
loading of data from the service providing system 1 1 0 in 
order to access data at a remote address. This process 
is hereinafter called a remote access process. 
[1472] In Fig. 56A is shown the renxrte access proc- so 
ess perfamed by the mobile user terminal 100. and in 
Figs. 85A and 85B are shown tiie contents of the mes- 
sages that are to be exchanged by the mobile user ter- 
minal 100 and the service providing system. 
[1473] When data to be accessed is located at the ss 
remote address, the mobile user terminal 100 gener- 
ates a remote access request 5600, i.e.. a message 
requesting that the user processa in the service provid- 


ing system. 1 1 0 access data, and transmits rt to the user 
processor. 

[1474] As is shown in Fig. 85 A, a digital signature 
8504 of a user is provided for data that consists of a 
renKJte access header 8500. which is header infomia- 
tion indicating the message is the remote access 
request 5600 and describing the data structure of the 
request; a data address 8501. which irxlicates a remote 
address; a user ID 8502; and an issued time 8503. 
which indicates the date when the remote access 
request 5600 was issued. The data are dosed and are 
addressed to tfie service provider, thereby providing the 
remote access request 5600. 

[1475] The user processor in the service providing 
system 110 receives the remote access request 5600. 
decrypts it and examines the digital signature, and gen- 
erates a remote access data message 5601 and trans- 
mits it to the mobile user terminal 100. 
[1476] As is shown in Rg. 65B, the digital signature of 
a service provider is provkJed for data that consist of a 
remote access header 8508. whk:h is header informa- 
tk)n indicating that the message is the remote access 
data 5601 and descrbing the data structure of the 
remote access data; data that are requested 8509; a 
service provider ID 8510; and an issued time 8511, 
which indicates the date on which the remote access 
data 5601 was issued. The data are closed and 
addressed to the user, thereby providing the remote 
access data 5601. 

[1477] The mobile user tern^nal 100 receives the 
remote access data 5601 , decrypts it. examines the dig- 
ital signature, stores It In the temporary area, and 
accesses the data. 

[1478] Similarly, in Fig. 57A is shown the remote 
access process performed by the gate terminal 101 or 
the merchant terminal 102 or 103. and in Figs. 86A and 
86B are shown the contents of messages tfiat are to be 
exchanged by the gate terminal 101 or the merchant 
terminal 102 or 103 and tiie servk;e providing system. 
[1479] When data to be accessed is located at the 
remote address, the gate terminal 101 or the merchant 
terminal 102 or 103 generates a remote access request 
5700. i.e., a message requesting that the merchant 
processor in the service providing system 110 access 
data, and transmits it to the merchant processor. 
[1480] As is shown in Fig. 86A, a digital signature 
8605 of a merchant is provided for data that consist of a 
remote access header 8600. which is header infomia- 
tion indicating the message is the remote access 
request 5700 and describing the data structure of the 
request; a data address 8601 . wNch indkstes a renune 
address; a gate ID or an accounting machine ID 8602; a 
merchant ID 8603; and an issued time 8604. which indi- 
cates the date on which the remote access request 
5700 was issued. The data are closed and are 
addressed to the service provider, thereby providing the 
remote access request 5700. 
[1481] The merchant processor in the service provid- 
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ing system 110 receives the remote access request 
5700. decrypts it and examines the digital signature, 
and generates a remote access data message 5701 
and transmits it to the gate terminal 101 or to the mer- 
chant terminal 1 02 or 1 03. 5 
[1482] As is shown in Fig. 86B. a digital signature of a 
service provider is provided for data that consist of a 
remote access header 8609, which is header informa- 
tion incficating that the message is the remote access 
data 5701 and describing the data structure of the io 
remote access data; data that are requested 8610; a 
sen^ice provider ID 8611; and an issued time 8612. 
which indicates the date on which the remote access 
data 5701 was issued. The data are dosed and are 
addressed to the merchant thereby providing the is 
remote access data 5701 . 

[1483] The gate terminal 101 or the merchant terminal 
102 or 103 receives the remote access data 5701. 
decrypts it cirtd examines the digital signature, stores it 
in the temporary area, and accesses the data. 20 
[1434] Next, an e)43lanation will be given for the con- 
tents of messages that the mobile user terminal 100. 
the gate terminal 101, the merchant terminal 102. the 
merchant terminal 103. the accounting machine 3555 
(automatic vending niachine 1 04) and the electronic tel- ss 
ephone accounting machine 800 (switching center 105) 
exchange with the service providing system 1 10 during 
the data updating process. The data updating process 
is a process whereby the service providing system 
updates the data in the RAM 1502 of the mot)ile user 3o 
terminal 100, or the RAM and the hard disk of the mer- 
chant terminal 102. the merchant terminal 103 or the 
accounting machine 3555 (automatic vending machine 
104). This process is hereinafter called a data updating 
process. 35 
[1 4851 In Fig. 566 is shown the data updating process 
performed by the mobile user terminal 100. and in Figs. 
87A to 87E are shown the contents of messages that 
the mobile user terminal 100 exchanges with the serv- 
ice providing system 110. 40 
[1486] When the value held by the dock counter 
matches the value in the update time register, the 
mobile user tenrunal 1 00 begins the data updating proc- 
ess. The mot>ile user terminal 1(K) generates a data 
update request 5G02, i.e.. a message requesting that 4S 
the user processor of the service provkling system 1 10 
update data, and transmits it to the user processor. 
[1487] As is shown in Fig. 87 A. a digital signature of a 
user is provided for data that consists of a data update 
request header 8700. which is header information indi- so 
eating the message is the data update request 5602 
and describing the data structure of the request 5602; a 
user ID 8701 ; and an issued time 8702. which indicates 
the date on which the data update request 5602 was 
issued. The data are dosed and are addressed to the ss 
sennce provider, thereby providing the data update 
request 5602. 

[1488] The user processor of the service provkling 


system 110 receives the data update request 5602. 
decrypts it and examines the digital signature, and gen- 
erates a data update request response 5603. i.e., a 
message irtiicating the range of data to be uploaded, 
and transmits it to the mobile user terminal 100. 
[1489] As is shown in Fig. 87B. a digital signature of a 
&ervk;e provider is provided for data that consists of a 
data qxlate request response header 8707, which is 
header information indicating that the message is tiie 
data update request response 5603. and describing the 
data structure of the response 5603; an update option 
code 8708 indicating the range of data to be uploaded; 
a service provider ID 8709; and an issued time 8710. 
which indk;ates the date on which the data update 
request response 5603 was issued. The data are dosed 
and are addressed to the user, thereby provkling tiie 
data update request response 5603. 
[1490] The update option code 8708 is code informa- 
tion that indicates tiie range of data to be uploaded from 
tiie mobile user terminal to the service provding sys- 
tem. This code is enployed to designate data for chang- 
ing the service data area, delta for changing the servk^e 
data area and the user area, all the data in the servrce 
data area, all the data in the service data area and tiie 
user area, or all tiie data in the basic program area, the 
service data area and the user area. The update option 
code 8708 is designated by the user processor in the 
servtoe provkling system, and the same code is not 
always designated each time. 
[1491] The mobile terminal 100 receives the data 
update request response 5603, deaypts it and exam- 
ines the digital signature, and generates data that are 
designated with the update option code 8708, Then, tiie 
mobile user terminal 100 generates upload data 5604. 
i.e., a message tiiat indicates the data that are to be 
uploaded to the service providing system 110. and 
transmits the data to the servk^e provkling system. 
[1492] If a large volume of data is to be uploaded to 
tiie servk;e system, the data are divided into a plurality 
of packets, which are transmitted as upload data 5604. 
[1493] As is shown in Fig. 87C. a digital signature of a 
user is provided for data that consists of an upload data 
header 8715, which is header information indrcating tiiat 
tiie message is the upload data 5604 and describing tiie 
data structure; an upload packet number 8716 indicat- 
ing a packet nunit»er for each of a plurality of packets; 
compressed upload data 8717 that are obtained by 
compres8ir)g the data tiiat are to be upksaded to the 
service provkling system; a user ID 8718; and an issued 
time 8719. which indicates the date on which the upload 
data 5604 was issued. The data are dosed and are 
addressed to the user, thereby provkling the upload 
data 5604. 

[1494] The user processor of the servrce provkling 
system receives tiie upload data 5604. and deaypts it 
and exan^nes the digital signature. Then, the user proc- 
essor decompresses the compressed upk>ad data 871 7 
and compares the obtained data with the terminal data 
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4607 in the user irrformation server 902 and the other 
data managed in the user data management informa- 
tion 4600. Then, the user processor generates update 
data 5605. which is a message for the updating of data 
in the RAM 1502 of the mobile user terminal 100, and 5 
transmits them to the mobile user terminal 100. If a 
large volume of data is to be uploaded to the service 
system, the data are divided into a plurality of packets, 
which are transmitted as ipload data 5605. 
[1495] As is shown in Rg. 87D. a digital signature of a 10 
service provider is provided for data that consists of an 
update data header 8724. which is header infonmation 
indicating that the message is the update data 5605 and 
desaibing the data structure; an update packet nun^er 
8725 indicating a packet number when the data are is 
divided into a plurality of packets; compressed update 
data 8726 that are obtained by conpressing update 
data; a service provider ID 8727; and an issued time 
8728, which indicates the date on which the update data 
5605 was issued. The data are closed and are 20 
addressed to the user, thereby providing the update 
data 5605. 

[1496] The mobile user terminal 100 receives the 
update data 5605. decrypts it and examines the digital 
signature, decompresses the update data 8726. and 2s 
updates the data in the RAM 1502. 
[1497] In order to generate data for updating the RAM 
1502, when there is no extra space in the object data 
area of the mobile user terminal 1 00, the user processor 
of the service providing system 110 compares the 30 
access times for the individual credit cards in the credit 
card list, and assigns a local address to the object data 
address for the credit card for which the access time is 
the latest; compares the access times for the individual 
tickets in the ticket list and assigns a k>cai address to 35 
the electronic ticket address for the ticket for which the 
access time is the latest; compares the access times for 
the individual payment cards in the payment card list 
and assigns a local address to the electronic payment 
card address for the payment card for which the access 40 
time is the latest; compares the access times for the 
indivkiual telephone cards in the telephone card list 
and assigns a kx:al address to the electronic telephone 
card address for the telephone card for which the 
access time is the latest; and compares the use times of 4s 
the information items and assigns a local address to the 
use information address for the information for which 
the use time is the latest. When the version of the pro- 
gram of the mobile user terminal must be upgraded, the 
data in the basic program area are updated. so 
[1 498] When the user processor of the service prcvid- 
ing system 1 10 compares the upload data and finds an 
illegal alteration of data, the user processor generates, 
instead of the ipdate data 5605, a mandatory expiration 
instruction 5605* that is a message for halting the func- ss 
tfon of the mobile user terminal 100, and transmits the 
instruction 5605* to the mobile user terminal 100. 
[1499] As is shown in Rg. 87E, a digital signature of a 


service provider is provided for data that consists of a 
mandatory e^^iration header 8733. which is header 
infomiation indicating that the message is the manda- 
tory expiration instnjction 5605' and descrit>ing the data 
structure; a service provider ID 8734; and an issued 
time 8735, which indicates that the date on which the 
mandatory expiration instruction 5605* was issued. The 
data are closed and are addressed to the user, thereby 
providing the mandatory expiration instruction 5605'. 
[1500] Upon receipt of the mandatory expiration 
instruction 5605', the mobile user terminal 100 decrypts 
it and examines the digital signature, and changes the 
terminal status 1802 to "use disabled." As a result the 
use of the nrrobile user terminal 100 is inhibited. 
[1501] Through the data updating process, informa- 
tion that is comparatively frequently used is stored in the 
RAM of the nx>bile user terminal, the latest version of 
the program is maintained for the mobile user terminal, 
and the illegal alteration of the terminal data can be pre- 
vented. 

[1502] In Fig. 57B is shown the data updating process 
performed by the gate terminal 1 0 1 . the merchant termi- 
nal 102, the merchant terminal 103. the accounting 
machine 3555 (automatic vending machine 104) and 
the electronic telephone card accounting machine 800 
{switching center 105), and in Figs. 88A to 88E are 
shown the contents of messages that are exchanged by 
the service providing system 1 10 and the gate terminal 
101. the mercham terminal 102. the merchant terminal 
103. the accounting machine 3555 or the electronic tel- 
ephone card accounting machine 800. 
[1503] When the value hekl by the clock counter 
matches the value in tiie update time register, the gate 
terminal 101, the merchant terminal 102, the merchant 
terminal 103, the accounting machine 3555 or the elec- 
tronic telephone card accounting machine 800 begins 
the data updating process. The gate terminal 101, tiie 
merchant terminal 102. the merchant terminal 103. the 
accounting machine 3555 or the electronic telephone 
card accoLffiting machine 600 generates a data update 
request 5702, i.e.. a message requesting that the mer- 
chant processor of tiie service providing system 110 
update data, and transmits rt to the merchant processor. 
[1504] As is shown in Fig. 8dA. a digital signature of a 
merchant (communication service provider) is provided 
for data ttiat consists of a data update request header 
8800. which is header information indicating the mes- 
sage is the data update request 5702 and describing 
the data structure of tiie request 5702; an accounting ID 
(or a gate ID for the gate terminal) 8801 ; a merchant ID 
8802 (a communication service provider ID for the elec- 
tronic telephone card accounting machine) 8802; and 
an issued time 8803, which indicates the date on which 
the data update request 5702 was issued. The data are 
closed and are addressed to the service provider, 
thereby providing the data update request 5702. 
[1505] The merchant processor of the service provid- 
ing system 110 receives tiie data update request 5702, 
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decrypts it. examines the digital signature, generates a 
data L43date request response 5703, i.e., a message 
indicating the range of data to be uploaded, and trans- 
mits it to the gate terminal 101, the merchant terminal 
102, the merchant terminal 103. the accounting 5 
machine 3555 or the electronic telephone card account- 
ing machine 800. 

[1 506] As is shown in Fig. 88B. a digital signature of a 
service provider is provided for data that consists of a 
data update request response header 8808. which is 10 
header information indicating that the message is the 
data update request response 5703, and desaibing the 
data structure of the response 5703; an update option 
code 8809 indicating the range of data to be uploaded: 
a service provider ID 8810: and an issued time 8811, 75 
which indicates that the date on which the data update 
request response 5703 was issued. The data are closed 
and are addressed to the merchant (communication 
service provider for the electronic telephone card 
accounting machine), thereby providing the data update 20 
request response 5703. 

[1 507] The ipdate option code 8809 is code informa- 
tion that indicates the range of data to be uploaded to 
the service providing system. TNs code is employed to 
designate data for changing the service data area, data 25 
for changing the service data area and the merchant 
area, all the data in the service data area, all the data in 
the service data area and the merchant area, or all the 
data in the basic program area, the service data area 
and the merchant area. The update option code 8809 is 30 
designated by the merchant processor in the service 
providing syst^, and the same code is not always des- 
ignated each time. 

[1508] The gate ternrinal 101 . the merchant terminal 
102. the merchant terminal 103. the accounting 35 
machine 3555 or the electronic telephone card account- 
ing machine 800 receives the data update request 
response 5703, decrypts it and examines the digital sig- 
nature, and generates data that are designated with the 
update option code 8809. Then, the gate terminal 101 , 40 
the merchant terminal 102, the merchant terminal 103, 
the accounting machine 3555 or the electronic tele- 
phone card accounting machine 800 generates upload 
data 5704, i.e., a message that Indicates to upload the 
data to the service providing system 110. and transnits 4S 
the data to the service providing system. 
[1509] If a large volume of data is to be uploaded to 
the sen^ice system, the data are divided into a plurality 
of packets, which are transmitted as upload data 5704. 
[1 51 0] As is shown in Fig. 88C, a digital signature of a so 
merchant (communication service provider) is provided 
for data that consists of an iqDload data header 8816. 
which is header information indicating that the message 
is the L^oad data 5704 and describing the data struc- 
ture: an upload packet number 881 7 indicating a packet ss 
nurvber for each of a plurality of packets: compressed 
upload data 8818 that are obtained by compressing the 
data that are to be upk)aded to the service providing 


system; an accounting machine ID (gate ID for the gate 
tenminal) 8819; a merchant (communication service 
provider) ID 8820; and an issued time 8821, which indi- 
cates the date on which the upload data 5704 was 
issued. The data are closed and are addressed to the 
merchant (communication service provider), thereby 
providing the upload data 5704. 
[1511] The merchant processor of the service provid- 
ing system receives the upload data 5704, and decrypts 
it and examines the digital signature. Then, the mer- 
chant processor decompresses the compressed upload 
data 8818 and compares the obtained data with the 
memory data 4705 in the merchant information server 
903 and the other data managed in the merchant data 
management information 4700. Then, the merchant 
processor generates update data 5705. which is a mes- 
sage for updating data in the RAM and on the hard disk 
of the gate terminal 101, the merchant terminal 102, the 
merchant terminal 103, the accounting machine 3555 or 
the electronic telephone card accounting machine 800, 
and transmits them thereto. If a large volume of data is 
to k>e upk>aded to the service system, the data are 
divided into a plurality of packets, which are transmitted 
as uptoai data 5705. 

[1 51 2] As is shown in Fig. 88D, a digital signature of a 
service provider is provided for data that consists of an 
update data header 8826, which is header Information 
lndk:ating that the message is the update data 5705 and 
describing the data structure; an update packet nuntier 
8827 indicating a packet nunt)er when the data are 
divided into a plurality of packets; compressed update 
data 8828 that are obtained by compressing update 
data; a service provider ID 8829; and an issued time 
8830. which indicates the date on which the update data 
5705 was issued. The data are closed and are 
addressed to the merchant (communication service 
provider), thereby providing the update data 5705. 
[1513] The gate terminal 101 , the merchant terminal 
102, the merchant terminal 103, the accounting 
machine 3555 or the electronic telephone card account- 
ing machine 800 receives the update data 5705. 
decrypts it and examines the digital signature, decom- 
presses the update data 8828, and updates the data in 
the RAM and on the hard disk. 
[1514] in order to generate data for ipdating, when 
there is no extra space in the object data area or in the 
hard disk, the merchant processor of the service provid- 
ing system 1 10 compares the transaction times for tiie 
history information in the transaction list, and assigns a 
local address to the transaction information address for 
history information for which the transaction time is the 
latest. When the version of the program of the gate ter- 
minal 101 , the merchant terminal 1 02. the merchant ter- 
minal 103. the accounting machine 3555 or the 
electronic telephone card accounting machine 800 must 
be upgraded, the data in the t>asic program area are 
updated. 

[1515] When the merchant processa of the service 
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providing system 110 compares the upload data and 
finds the illegal alteration of the data, the mercharrt 
processor generates, instead of the update data 5705. a 
mandatory expiration instruction 5705', which is a mes- 
sage for halting the function of the gate terminal 101. 5 
the merchant terminal 102. the merchant terminal 103, 
the accounting machine 3555 or the electmnic tele- 
phone card accounting machine 800, and transmits the 
instruction 5705* thereto. 

[1516] As is shown in Rg. 8dE, a digital signature of a 10 
service provider is provided for data that consrsts of a 
mandatory expiration header 8835. which is header 
information indicating that the message is the manda- 
tory expiration instruction 5705' and describing the data 
structure; a service provider ID 8836; and an issued is 
time 8837, which indicates that the date on which the 
mandatory expiration instruction 5705' was issued. The 
data are dosed and are addressed to the user, thereby 
providing the mandatory expiration instruction 5705". 
[1517] Upon receipt of the mandatory expiration 20 
instruction 5705'. the gate terminal 101. the merchant 
terminal 102, the merchant terminal 103. the accounting 
machine 3555 or the electronic telephone card account- 
ing machine 800 decrypts it and examines the digital 
signature, and changes the terminal status (or the 25 
accounting machine status) to "use disabled." As a 
result, the use of the gate ternrvnal 101, the merchant 
terminal 1 02, the merchant terminal 1 03. the accounting 
machine 3555 or the electronic telephone card account- 
ing machine 800 Is inhibited. 30 
[1518] Through the data updating process, infornna- 
tion that is comparatively frequently used is stored in the 
RAM and on the hard disk of the gate terminal 101 . the 
merchant terminal 102, the merchant terminal 103, the 
accounting machine 3555 or the electronic telephone 3S 
card accounting machine 800, the latest version of the 
program is maintained for the gate terminal 101, the 
merchant terminal 102, the merchant terminal 103, the 
accounting machine 3555 or the electronic telephone 
card accounting machine 800, and the illegal alteration 40 
of the terminal data can be prevented. 
[1519] An explanation will now be given for the con- 
tents of messages that the mobile user terminal 101 
and the merchant terminal 102 exchange with the serv- 
ice providing system 1 10 during the processing for forci- 4s 
biy updating data. During the processing for forcibly 
updating data, upon the need of urgent data dating, the 
service providing system 110 forcibly updates the con- 
tents of the RAM 1 502 of the mobile user terminal 101 , 
or the contents of the RAM and the hard disk of the gate so 
terminal 101. the merchant terminal 102. the merchant 
terminal 103. the accounting machine 3555 or the elec- 
tronic telephone card accounting machine 800. This 
process is hereinafter called a forcible data updating 
process. 55 
[1520] In Fig. 56C is shown the forcible data updating 
process performed by the mobile user terminal 1 00, and 
in Figs. 87C to 87F are shown the contents of mes- 


sages that are exchanged by the mobile user terminal 
100 and the service providing system 1 10. 
[1521] When the data in the RAM of the mobile user 
terminal 100 must be urgerttly updated, such as when 
the terms of a contract with tie user are changed, the 
service providing system 110 generates a data update 
instruction 5606. i.e., a message instructing the nrx)bile 
user terminal 100 to perform the forcible data updating 
process, and transmits it to the mobile user terminal 
100. 

[1522] As is shown in Fig. 87F. the digital signature of 
a service provkier is provided for data that consists of a 
data update instruction header 8740. whfoh is header 
information indicating that the message is the data 
update instruction 5606 and descrbing the data struc- 
ture; an update option code 8741 ; a service provider ID 
8742; and an issued time 8743, which indicates the date 
on which the data update instructfon 5606 was issued. 
These data are cfosed and addressed to the user, 
thereby provkiing the data update instruction 5606. 
[1523] Upon receiving the data update instruction 
5606, the mobile user terminal 100 decrypts it and 
examines the digital signature, and generates data as 
designated by the update option code 8741. Then, the 
nfiobite user 100 generates ipload data 5607, wNch is a 
message for uploading the data to the service provkjing 
system 110. and transmits the data 5607 to the service 
provkiing system. 

[1524] If a large volume of data is to be upfoaded to 
the service system, the data are divkled into a plurality 
of packets, which are transmitted as upfoad data 5607. 
[1525] The user processor of the service provkjing 
system 110 receives the upfoad data 5607, decrypts it 
and examines the digital signature, decompresses the 
compressed upload data 8717 and compares the 
obtained data with the terminal data 4607 in the user 
information server 902 and the other data in user data 
management information 4600. Then, the service pro- 
viding system 110 generates the update data 5608. 
whtah is a message for updating data in the RAM 1502 
of the mobile user terminal 100, and transmits them to 
the mobile user terminal 100. If a large volimie of data is 
to be transnnitted to the mobile user terminal 100. the 
data are divided into a plurality of packets, which are 
transmitted as update data 5608. 
[1526] The mobile user terminal 100 receives the 
update data 5608. decrypts it. examines the digital sig- 
nature, decompresses the compressed update data 
8726, and updates the data in the RAM 1502. 
[1 527] When the user processor of the ser vfoe provid- 
ing system corrpares the upload data with the other 
data and finds the illegal alteration of the data, the user 
processor generates, instead of the update data 5608. a 
mandatory expiration instruction 5608'. which is a mes- 
sage for halting the function of the mobile user terminal 
100. and transmits the instruction 5608' to the mobile 
user terminal 100. 

[1528] Upon receipt of the mandatory expiration 
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instruction 5608\ the mobile user terminal 100 decrypts 
it, examines the digital signature, and changes the ter- 
minal status 1802 to "use disabled." As a result, the use 
of the motxie user terminal 100 is inhibited. 
[1 529J In Fig. 57C is shown the forcible data updating 
process performed by the gate terminal 101. the mer- 
chant terminal 102, the mercharrt terminal 103. the 
accounting machine 3555 (automatic vending machine 
104) and the electronic telephone card accounting 
machine (switching center 105). In Figs. 88C to 88F are 
shewn the contents of messages that are exchanged by 
the service providing system 110 and the gate tenmtnal 
101, the merchant terminal 102. the merchant terminal 
103. the accounting machine 3555. or the electronic tel- 
ephone card accounting machine 800. 
[1 530} When the data in the RAM and on the hard disk 
of the gate terminal 101. the merchant terminal 102, the 
merchant termiral 103, the accounting machine 3555. 
or the electronic telephone card accounting n^chine 
800 must be urgently ipdated. such as when the con- 
tents of a ticket is changed or the terms of a contract 
entered into by the service provkjer and the merchant 
(the communication service provider for the electronic 
telephone card accounting macNne 800) are changed, 
the service providing system 110 begins the forcible 
data updating process. 

[1531] First the merchant processor of the service 
providing system 110 generates a data update instruc- 
tion 5706. i.e.. a message instnjcting the performance 
of the forcible data updating process, and transnvts it to 
the gate terminal 101. the mercham terminal 102, the 
merchant terminal 103, the accounting machine 3555, 
or the electronic telephone card accounting machine 
800. 

[1 532] As is shown in Fig. 88F. tiie digital signature of 
a service provtier is provided for data that consists of a 
data update instruction header 8842, which is header 
information indicating that the message is the data 
update instruction 5706 and desoibing the data struc- 
ture; an update option code 8843: a service provider 10 
8844; and an issued time 8645. which indicates tiie date 
on which the data update instruction 5706 was issued. 
These data are closed and addressed to the user, 
thereby providing the data update instruction 5706. 
[1533] Upon receiving the data update instruction 
5706. the gate terminal 101 , the merchant terminal 102, 
tiie merchant terminal 103, the accounting machine 
3555, or the electronic telephone card accounting 
machine 800 decrypts it examines the digital signature, 
and generates data as designated by the ifxlate option 
code 8843. Then, the gate terminal 101, the merchant 
tenninal 102, the merchant terminal 103, the accounting 
machine 3555. or the electronic telephone card 
accounting machine 800 generates upk>ad data 5707, 
which is a message for uploading tiie data to the service 
providing system 110. and transmits the data 5707 to 
the service providing system. 
[1534] If a large volume of data is to be uploaded to 


the service system, the data are divided into a plurality 
of packets, which are transmitted as upload data 5707. 
[1 535] The merchant processor of the service provid- 
ing system receives the upload data 5707, and decrypts 

'S tt and examines the digital signature. The nr>erchant 
processor then decompresses the compressed upload 
data 8818 and compares the obtained data witii the 
memory data 4705 in the merchant information server 
903 and the other data in merchant data management 

10 information 4700. Then, the merchant processor gener- 
ates the update data 5708, which is a message for 
updating data in the RAM and on the hard disk of the 
gate terminal 101, the merchant terminal 102, the mer- 
chant terminal 103, the accounting machine 3555, or 

15 the electronic telephone card accounting machine 800. 
and ti^ansmrts them thereto. If a large volume of data is 
to be transmitted to the mobile user terminal 100, the 
data are divided into a plurality of packets, which are 
transmitted as update data 5708. 

20 [1536] The gate tenninal 101 . the merchant terminal 
102, tiie merchant terminal 103, the accounting 
machine 3555. or tiie electronic telephone card 
accounting machine 800 receives the update data 
5708. decrypts it and exan^nes the digital signatore. 

25 decompresses the compressed update data 8828. and 
updates the data in the RAM and on the hard disk. 
[1537] When the merchant processor of tiie servce 
providing system oorrpares tiie i^oad data witii the 
otiier data and finds tiie illegal alteration of data, tiie 

30 merchant processor generates, instead of tiie update 
data 5708, a mandatory expiratbn instruction 5708', 
which is a message for halting the functton of the gate 
terminal 101. tiie merchant terminal 102, the merchant 
terminal 103, the accounting n^chine 3555, or tiie elec- 

35 tronic telephone card accounting machine 800. and 
transmits the instruction 5708' thereto. 
[1538] Upon receipt of the mandatory expiration 
instructk>n 5708', the gate terminal 101, the merchant 
terminal 102, the merchant terminal 103. the accounting 

40 machine 3555. or tiie electronic telephone card 
accounting machine 800 decrypts it and examines the 
digital signature, and changes the terminal statje (or 
tiie accounting machine status) to "use disabled." As a 
result the use of tiie gate terminal 101. the merchant 

45 terminal 102, the merchant terminal 103. the accounting 
machine 3555. or tiie electronic telephone card 
accounting machine 800 is inhibited. 
[1539] An explanation will now be given for the con- 
tents of messages tiiat the mobile user terminal 100 

50 and tiie merchant terminal 104 exchange with the serv- 
ice providing system 1 10 during the processing for ttie 
data backup. During tiiis processing, when the remain- 
ing battery capacity of the mobile user terminal 100 is 
small, the contents of the RAM are automatically 

55 backed up in the user inforn^on server of the sen/ice 
providing system. This process is hereinafter called a 
data backup process. 

[1540] In Fig. 56D is shown the data backup process 
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performed by the mobile user terminal 100, and In Figs. 
87A to 87E are shown the contents of messages that 
are exchanged by the mobile user terminal 100 and the 
service providing system 1 10. The data badop process 
is performed in substantially the same manner as is the 
data updating process. In the backup process, when the 
mobile user terminal 100 receives the update data 5612 
and updates the data in the RAM 1502, the terminal 1 00 
changes the terminal status 1802 to ''writing disabled," 
and inhibits the input of new data to the RAM until there 
is an adequate available battery capacity. 
[1541 ] When the battery capacity is reduced until it is 
equal to or smaller than Q, the mobile user terminal 100 
generates a data backup request 5609, i.e., a message 
requesting that the user processor of the service provid- 
ing system 110 perform the data backup process, and 
transmits it to the user processor. 
[1542] The user processor of the service providing 
system receives the data ipdate request 5609, 
decrypts it and examines the digital signature, emd gen- 
erates a data update request response 5610, i.e.. a 
message indicating the range of data to t>e upk>aded. 
and transmits it to the mobile user terminal 100. 
[1 543] The vndbWe user terminal 1 00 receives the data 
update request response 5610, decrypts it and exam- 
ines the digital signature, and generates data desig- 
nated by the update option code 8706. Then, the mobile 
user terminal 100 generates upload data 5611, i.e., a 
message that indicates to upload the data to the service 
providing system 1 10, and transmits the data 5611 to 
the service providing system 110. 
[1544] The user processor of the service providing 
system 1 10 receives the upload data 561 1 . decrypts it, 
and examines the dgital signature. Then, the user proc- 
essor decompresses the oonpressed upload data 
871 7, and compares the obtained data with the terminal 
data 4607 in the user information server 902 and the 
other data in the user data management information 
4600. Then, the user processor generates the update 
data 5612, which is a message for updating data in the 
RAM 1502 of the mobile user tenninal 100, and trans- 
mits them to the mobile user terminal 100. 
[1545] The mobile user terminal 100 receives the 
update data 5612, decrypts it and examines the digital 
signature, decompresses the compressed update data 
8726. and updates the data In the RAM 1502. In addi- 
tion, the mobile user terminal 100 changes the terminal 
status 1802 to ''writing disabfed." and inttibits the entry 
of new data in the RAM until there is an adequate bat- 
tery capacity. 

[1 546] When the user processor of the service provid- 
ing system conrpares the upload data with the other 
data and finds the illegal alteration of data, the service 
providing system 110 generates, instead of the update 
data 5612, a mandatory expiration instruction 5612', 
which is a message for halting the function of the mobile 
user terminal 100, and transmits the instruction 5612' to 
the mobile user terminal 100. 


[1547] Upon receipt of the mandatory expiration 
instruction 5612', the mobile user ternvnal 100 decrypts 
it. examines the digital signature, changes the terminal 
status 1802 to "use disabled" and "writing disabled." As 
a result, the usexsf thexnobiteuser terminal lOO is inhib- 
ited. 

[1 548] Similarly in Fig. 570 is shown the data backup 
process performed by the merchant ternvnal 103. and in 
Figs. 88A to 88E are shown the contents of messages 
that are exchanged by the merchant terminal 103 and 
the service providing system 110. The data k>ackup 
process is performed in substantially the same manner 
as for the data updating process. In the backup process, 
when the mercharrt terminal 103 receives the update 
data 5712 and updates the data in the RAM 3002. the 
merchant terminat 103 changes the terminal status 
3302 to '^flrriting disabled," and inrtbits the input of new 
data to the RAM until there is an adequate available bat- 
tery capacity. 

[1 549] When the battery capacity is reduced until it is 
equal to or smaller than Q. the n)erchant terminal 103 
generates a data backup request 5709, i.e.. a message 
requesting that the merchant processor of the service 
providing system 110 perform the data backup process, 
and transmits it to the merdiant processor. 
[1 550] The merchant processor of the service provid- 
ing system receives the data update request 5709, 
decrypts it and examines the digital signature, and gen- 
erates a data update request response 5710. i.e., a 
message indicating the range of data to be upk>aded. 
and transmits it to the merchant terminal 103. 
[1551] The merchant terminal 103 receives the data 
update request response 5710. decrypts it, examines 
the digrtat signature, and generates data designated by 
the update option code 8809. Then, the merchant termi- 
nal 103 generates upload data 5711. i.e., a message 
that indicates to upload the data to the service providing 
system 1 10, and transmits the data 571 1 to the service 
providing system. 

[1 552] The merchant processor of the service provid- 
ing system receives the upload data 571 1. decrypts and 
it and examines the digital signature. Then, the mer- 
chant processor decompresses the compressed upload 
data 8818. and compares the obtained data with the 
menx)ry data 4705 in the merchant information server 
903 and the other data in the merchartt data manage- 
ment information 4700. Then, the merchant processor 
generates the update data 571 2, which is a message for 
updating data in the RAM 3002 of the merchant terminal 
103. and transmits them to the mercfiant terminal 103. 
[1 553] The merchant terminal 1 03 receives the update 
data 5712, decrypts it and examines the digital signa- 
ture, decompresses the compressed update data 8826, 
and updates the data in the RAM 3002. In addition, the 
merchant terminal 103 changes the temrvnat status 
3302 to 'Witing disabled," and inhibits the entry of new 
data in the RAM until there is an adequate battery 
capacity 
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[1554] AA/hen the merchant processor of the service 
providing system compares the upload data with the 
other data and finds the illegal alteration of the data, the 
merchant processor generates, instead of the update 
data 5712, a mandatory expiration instruction 5712', -5 
which is a message for halting the function of the mer- 
chant terminal 103. and transmits the instruction 5712' 
to the merchant terminal 103. 
[1555] Upon receipt of the mandatory expiration 
instruction 5712', the merchant terminal 103 decrypts it 10 
and examines the digital signature, and changes the 
terminal status 3302 to 'use disabled" and *Wrting disa- 
bled." As a result, the use of the merchant terminal 103 
is inhibited. 

[1556] An explanation will now be given for the con- 15 
tents of messages that are exchanged by devices dur- 
ing the ticket order processing. 
[1557] In Fig. 58 are shown the procedures used for 
exchanging messages by the devices during the ticket 
order processing, and in Figs. 89A and 89B and Figs. 20 
90A and 90B are shown the contents of messages that 
are exchanged by devices during the tick^ order 
processing. 

[1558] First when a user displays the ticket order 
screen on the mobile user terminal 100 and performs a 26 
ticket order operation 5800, the mobile user terminal 
transmits a ticket order 5801 to the service providing 
system via digital wireless telephone communication. 
[1 559] As is shown in Fig. 89A, the digital signature of 
a user is provided for data that consists of a ticket order 30 
header 8900. which is header information indicating that 
the message Is the ticket order 5801 and indicating the 
data structure; a service code 8901 , which identifies the 
type of service requested by the user; a ticket order 
code 8902, which identifies the order code of a ticket 35 
entered by the user; a desired ticket date 8903; a 
desired number of tickets 8904; a request number 8905, 
which is artNtrarily generated as a number that uniquely 
represents the ticket order processing; a user ID 8906; 
and an issued time 8907. which indicates the date on 40 
which the ticket order 5801 is issued. These data are 
closed and addressed to the service providing system, 
thereby providing the ticket order 5801. The service 
code 8901 identtfies the ticket order tor a ticket issuer 
selected by the user. 45 
[1 560] Upon receiving the tk:ket order 580 1 . the user 
processor of the service providing system 1 10 deaypts 
it and examines the digital signature, and transmits rt to 
the sen/ice manager processor. Then, the service man- 
ager processor generates a service director processor so 
to form a process group tor processing a ticket order 
8908. Tbe service director processa refers to the ticket 
issuer list 5203 arxj generates a ticket order 8920 for the 
ticket issuer identified by the s^ce code 8901. The 
ticket issuer processor closes the ticket order 8920 and ss 
addresses it to the ticket issuer, and transmits the 
resultant order as a ticket order 1 1 402 to the tktet issu- 
ing system 107. 


[1 561 ] As is shown in Fig. 896. the digital signature of 
a service providing system is provided for data that con- 
sist of a ticket order header 8912, which is header infor- 
mation indicating that the message is the ticket order 
5802 and desaibing. the data .structure; a ticket order 
code 8913; a desired ticket date 8914; a desired 
number of tickets 8915; a request number 8916; a cus- 
tomer number 8917, which uniquely identifies a user for 
the ticket issuer; a service provider 10 8918; and an 
issued time 8919. which indicates the date on which the 
ticket order 5802 was issued. These data are dosed 
and addressed to the tktot issuer, thereby provkiing the 
ticket order 5802. 

[1562] The custonner number 8917 is identification 
infbrmatfon for a user that is useful only to the ticket 
issuer, and differs from the user ID or the telephone 
numt>er. When there was a previous transaction to 
which the user and the ticket issuer were parties, the 
customer number that is registered in the customer 
table of the ticket issuer is designated. The customer 
table is indicated by using the customer table address 
5230 of the ticket issuer list 5203. 
[1563] Upon receiving the ticket order 5802, the ticket 
Issuing system 107 deaypts it and examines the digital 
signature. The ticket issuing server 1100 employs the 
customer information in the customer information server 
1101 and the ticket issuing condition of the ticket infor- 
mation server 1 103 to generate a ticket order response 
5803, whk:h is a message prepared as a response to 
the tcket order 5802, and transmits it to the sen/ice pro- 
vkiing system. 

[1564] As is shown in Fig. 90A, the digital signature of 
a ticket issuer is provkJed for data that consists of a 
ticket order response header 9000, which is header 
Infbrmatfon indicating that the message is the ticket 
order response 5803 and descrfoing the data structure; 
a response code 9001, which identifies the type of 
response prepared for the ticket order 5802; a request 
number 9002; a customer number 9003; a tk^ket sales 
offer 9004, which constitutes an offer made by the ticket 
issuer to the user; an offer number 9005. whfoh is an 
arbitrarily generated number that uniquely represents 
the offer made to the user; a validity term 9006 for the 
ticket sales offer 9004; a ticket issuer ID 9007; and an 
issued time 9008. which indicates the date on which the 
ticket order response 5803 was issued. These data are 
dosed and addressed to the service provider, thereby 
providing the ticket order response 5803. 
[1 565] The response code 9001 identifies the type of 
response prepared for a ticket order, such as Hcket 
available," "sold out," "over tick« limit." or 1kd<et order 
code error." 

[1 566] The tidcet sales offer 9004 is text Information 
for the order received from the user, and indudes the 
seat number for an available ticket or the price of a 
ticket. The digital signature of a tk:ket Issuer is provided 
for the ticket sales offer. When a ticket can not be Issued 
because all tickets have been sold, the ticket sales offer 
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is not set. 

[1567] The ticket issuing system 107 can specify a 
customer using the customer number 8917 that is 
included in the ticket order 5802. Before generating the 
ticket order response 5803, theiicket issuing system s 
107 can change the seat or the price of the ticket 
included in the ticket sales offer 9004 based on the pur- 
chase history of the customer. 
[1 568] Upon receiving the ticket order response 5803. 
the ticket issuer processor of the service providing sys- io 
tem decrypts it and examines the digital signature, and 
transmits rt to the service director processor. The serv- 
ice director processor uses a ticket order response 
9009 to generate a ticket order response 9023. The 
user processor closes the ticket order response 9023 is 
and addresses IT to the user, and transmits it as a ticket 
order response 5804 to the mobile user terminal. 
[1569] As is shown in Rg. 90B. the digital signature of 
a service provkjer is provkled for data that consists of a 
ticket order response header 9014. which is header 20 
information identifying the message as the ticket order 
response 5804 and describing the data structure; a 
response code 9015; a response message 9016, which 
comprises the contents of the response to the ticket 
order; a request number 9017; a ticket sales offer 9018; 2s 
an offer number 9019: a validity term 9020 tor the ticf^ 
sales offer 9018; a service provider ID 9021; and an 
issued time 9022, which indicates the date on which the 
ticket order response 5804 was issued. These data are 
dosed and addressed to the user, thereby providing the 30 
ticket order response 5804. 

[1570] The response message 9016 is a standardized 
text message that the service director processor sets in 
accordance with the response code 9001. When the 
response code 9001 is not code indicating 'ticket avail- 35 
able," a standardized message is prepared that com- 
prises the contents of the response code. 
[1 571 ] Upon receiving the ticket order response 5804, 
the mobile user terminal deaypts it arxJ examines the 
digital signature, and displays the contents of the ticket 4C 
order response 5804 on the LCD 303. The ticket order 
processing is thereafter terminated. When the response 
code 9015 indicates Hcket available." the contents of 
the tk^ket sales offer 9018 are displayed. In the other 
cases, the response message 901 6 is displayed. 4S 
[1572] An e)q3lanation will now k>e given for the con- 
tents of messages that are exchanged by devices dur- 
ing the ticket purchase processing. 
[1573] In Rg. 59 are shown the procedures fa the 
exchange of messages by devices during the ticket pur- so 
chase processing. In Figs. 91 A and 91 B, 92A and 92B. 
93A and 93B. 94A and 94B, and 95A and 95B are 
shown the contents of messages that are exchanged by 
devices during the ticket purchase processing. 
[1574] First, when a user performs a ticket purchase ss 
order operatkxi 5900, the mobile user terminal trans- 
mits a ticket purchase order 5901 to the service provid- 
ing system through digital wireless telephone 


communication. 

[1575] As is shown in Fig. 91 A, the digital signature of 
a user is provided for data that consists of a ticket pur- 
chase order header 9100, which is header information 
identifying the message as the ticket purchase order 
5901 and describing the data structure; a response 
code 9101, which identifies the type of service 
requested by the user; a ticket sales offer 9102. which is 
included in the ticket order response 5804; an offer 
number 9103. which identifies the ticket sales offer 
9102; a payment service code 9104, which identifies a 
aedft card designated by the user; a payment value 
9105; a payment option code 9106, which identifies a 
payment option, such as the number of payments des- 
ignated by the user; a request number 9107, which is an 
art>itrarily generated number that uniquely represents 
the ticket purchase processing; a validity term 9108 for 
the ticket purchase order 5901 ; a user ID 9109; and an 
issued time 91 10, which is the date on which the ticket 
purchase order 5901 was issued. These data are 
dosed and addressed to the service provider, thereby 
provkiing the tkiket purchase order 5901. The service 
code 9101 identifies the purchase of a ticket from a 
tk:ket issuer who issued the tk:ket sales offer 9102. 
[1576] Upon receiving the tk:ket pirchase order 5901 . 
the user processor of the service provkjing system 1 10 
decrypts rt and examines the digital signature, and 
transmits it to the service manager processor. Then, the 
service manager processor generates a service director 
processor to form a process g-otp that processes a 
ticket order 8908. The service director processor refers 
to the ticket issuer list 5203 and generates a ticket pur- 
chase order for the ticket issuer indicated by the service 
code 9101 . The ticket issuer processor doses the ticket 
order and addresses it to the ticket issuer, and transmits 
the resultant order as a ticket purcfiase order 5902 to 
the ticket issuing system 107. 
[1577] As is shown in Fig. 918, the digital signature of 
a service providing system is provided fa data that con- 
sists of a ticket purchase order header 91 15. whch is 
header information indicating that the message is the 
ticket purchase ader 5902 and describing the data 
structure; an offer number 91 16, which kientifies a ticket 
sales offer issued by the ticket issuer; a payment serv- 
ice code 91 17; a payment value 91 18; a payment option 
code 91 19; a request number 9120; a customer number 
9121. which uniquely represents a user for the ticket 
issuer; a validity term 9122 for the ticket purchase order 
5902; a service provider ID 9123; and an issued time 
9124, which is the date on which the ticket purchase 
order 5902 was issued. These data are cfosed and 
addressed to the ticket issuer, thereby providing the 
ticket purchase order 5902. 

[1578] When there was a prevfous transaction to 
which the user and the ticket issuer were parties, a cus- 
tomer number tfiat is registered in the customer table of 
the ticket issuer is established as the customer numt>er 
9121. When there was no previous transaction, the 
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service director processor generates for the ticket issuer 
a number that uniquely represents the user, establishes 
it as the customer nunnber 9121, and registers that 
nunnber in the customer table. The customer table is 
- designated by using the customer table address 5230 of 
the ticket issuer list 5203. 

[1 579] Upon receiving the ticket order 5902. the ticket 
issuing system 107 decrypts it and examines the digital 
signature. The ticket issuing server 1100 updates the 
data in the customer information server 1 101 , the ticket 
issuing information server 1 102 and the ticket informa- 
tion server 1103. generates tx:ket data (9219) for the 
ordered tk:ket and transmits, to the service provkiing 
system, an electronic tkiiet issuing comn^ssion 5903, 
which constitutes a message requesting the process for 
issuing an electronic ticket that corresponds to the ticket 
and the process for settling the price of the ticket. 
[1 580] As is shown in Fig. 92 A. the digital signature of 
a ticket issuer is provided for data that consists of an 
electronic Ikkei issuing commission header 9200. 
which is header infonnation identifying the message as 
the electronic ticket issuing oommisskKi 5903 and 
desaibing the data structure; a transactk>n number 
9201. which is an art>itranty generated number that 
uniquely kjentifies a transaction to which a user is a 
party; a sales value 9202. which conveys the price of a 
ticket; a clearing option 9203. whk:h indicates which 
clearing procedures apply; a request nun^er 9204; a 
ticket code 9205, which identifies the type of electronic 
ticket that is to be issued; a template code 9206, whk:h 
identifies a template program to be used for an elec- 
tronic tk:ket that is to be issued; a number of tickets 
9207, which indicates how many tickets are to be 
issued; trcket data 9208; representative component 
information 9209; a ticket issuer ID 9210; and an issued 
time 9210, which is the date on which the electronic 
ticket issuing commission 5903 was issued. These data 
are closed and addressed to the service provkJer, 
thereby provkiing the electrons ticket issuing commis- 
sk)n 5903. 

[1581] The clearing option 9203 is information by 
which the tcket issuing system designates, to the sen^- 
ice providing system, the procedures to be used for 
clearing the prk;e of a ticket. The clearing process is 
roughly divided into a spontaneous clearing process for 
issuing an electronic tk:ket to a user after the price of the 
ticket has been cleared, and a delayed clearing process 
for clearing the price of a tk:ket after an electronic tkrket 
has been issued. The clearing option 9203 is used to 
designate either clearing process. 
[1 582] In the delayed clearing process, since an elec- 
tronic ticket is issued to a user before the clearing proc- 
ess Is performed, the user does not have to wait. 
[1583] For example, based on a purchase history 
maintained for customers, the ticket issuer can desig- 
nate the delayed clearing process for a customer with 
wfiom it has had dealings and who is known to be trust- 
worthy, and can designate the spontaneous clearing for 


a customer with whom it has had no previous dealings. 
[1584] The ticket data 9208 is ticket information issued 
by the ticket issuer. A number of ticket informatfon items 
equivalent to the number of tickets 9207 are established 

S ' as the ticket data 9208. For one ticket, the digital signa- 
ture of a ticket issuer is provided for data that consist of 
a ticket ID 9216, ticket information 9217 and a ticket 
issuer ID 9218. and the tk:ket inforn^tion is thereby pro- 
vided. The ticket information 9217 is ASCII information 

10 describing the contents of a ticket For the ticket infor- 
mation 9217, the title of a ticket, the date, the locatton. 
the seat dass. the sponsor and whether rt can be trans- 
fen-ed. and the usage condition information, such as the 
number of coupon tickets, when the ticket is used as a 

15 coupon ticket, are desaibed using a form whereby tag 
informatfon representing varfous information types is 
additionally provded. 

[1585] The representative component information 
9209 is information that is established as the represent- 

20 ative component information 1932 for an electronic 
ticket to be generated. Therefore, the representative 
component information 9209 may not be set for use. 
[1 586] The ticket issuer processor of the service pro- 
vkiing system receives the electronic tk:ket issuing oom- 

25 mission 5903. deaypts it and examines the digital 
signature, and transmits it to the service director proc- 
essor. Hie servk:e director processor performs the elec- 
tronic ticket issuing process and the ticket price clearing 
process in accordance with ttie clearing procedures 

30 designated by using the clearing option 9203. 

[1587] In Rg. 59 is shown the spontaneous clearing 
process. The delayed clearing process will be descrifc)ed 
later. 

[1588] For the spontaneous clearing, the service 

35 director processor generates a clearing request 9324, 
which is a message requesting the clearing of the price 
of a ticket. The transaction processor processor closes 
tiie clearing request 9324 and addresses it to the trans- 
action processor, and then transmits it as a clearing 

40 request 5904 to the transaction processing system 1 06. 
[1589] As is shown in Fig. 936, the digital signature of 
a sen^kie provider is provided for data that consists of a 
clearing request header 9314. whk;h is header informa- 
tion indk:ating that the message is the clearing request 

45 5904 and desaibing tiie data structure; a user clearing 
account 9315. which includes a credit card that corre- 
sponds to the payment service code designated by the 
user; a ticket issuer clearing account 9316, which desig- 
nates the clearing account of a tk:ket issuer; a payment 

so value 9317; a payment option code 9318; a request 
number 9319. which is issued by the mobile user termi- 
nal 100; a transaction numt>er 9320. which is issued by 
the ticket issuing system; a validity term 9321, whk:h 
presents the period during which the clearing request 

55 5904 is effective; a service provkler ID 9322; and an 
issued time 9323, which indicates the date on which the 
clearing request 5904 was issued. These data are 
closed and addressed to ttie transaction processor, 
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thereby providing the clearing request 5904. 
[1590] The transaction processing system 106 
receives the clearing request 5904. decrypts it and 
examines the digital signature, and performs the clear- 
ing process. Thenrthe transaction processing system 
106 generates a clearing completion notification 5905. 
and transmits it to the service providing system 110. 
[1 591 ] As is shown in Rg. 94A, the digital signature of 
a transaction processor is provided for data that consist 
of a clearing completion notification header 9400, which 
is header information indicating that the message is the 
clearing completion notification 5905 and describing the 
data structure; a clearing number 9401, which is an 
art3itrarily generated number that uniquely represents 
the clearing process performed by the transaction 
processing system 106; a user clearing account 9402; a 
ticket issuer clearing account 9403; a payment value 
9404; a payment option code 9405; a request number 
9406; a transaction number 9407; clearing information 
9408 for a service provider that is acoompanied by the 
digital signature of the transaction processor; clearing 
infonnation 9409 for a ticket issuer that is accompanied 
by tiie digital signature of the transaction processor; 
clearing information 9410 for a user that is acoompa- 
nied by the digital signature of tiie trartsaction proces- 
sor; a transactk)n processor provider ID 941 1 ; and an 
Issued time 941 2, which indicates the date on which the 
clearing corrpletion notification was issued. These data 
are closed and addressed to the service provider, 
thereby providing the clearing completion notification 
5905. 

[1592] Upon receiving the clearing completion notifi- 
cation 5905, the transaction processor processor of the 
service providing system 110 decrypts it and examines 
the digital signature, and transmits a clearing comple- 
tion notification 9413 to the service director processor 
Upon receiving the clearing completion notification 
9413, the service director processor generates a clear- 
ing oonpletion notification 9430 for tiie ticket issuer. The 
ticket issuer processor closes the clearing oonpletion 
notification 9430, and transmits it to the ticket issuing 
system 107 as a clearing completion notification 5906 
for the ticket issuer. 

[1593] As is shown in Fig. 94B, the digital signature of 
a service provider is provided for data that consist of a 
clearing completion notification header 9417, which is 
header infomnation indicating tiiat the message is the 
clearing completion notification 5906 and describing the 
data stnjcture; a clearing number 9418; a customer 
number 9419; a ticket issuer ID 9420; a paynDent serv- 
ice code 9421 ; a payment value 9422; a payment option 
code 9423; a request number 9424; a transaction 
number 9425; clearing information 9426 for a ticket 
issuer tiiat is accompanied by the digital signature of the 
transaction processor; a transaction processor ID 9427; 
a service provider ID 9428; and an issued time 9429. 
which indicates the date on which the clearing comple- 
tion notification was issued. These data are dosed and 


addressed to the ticket issuer, thereby providing tiie 
clearing completion notification 5906. 
[1594] Upon receiving the clearing completion notifi- 
cation 5906, the ticket issuing system deaypts it and 

$ -examines the digital signature, and generates a receipt 
5907 and transmits it to the service providing system. 
[1595] As is shown in Fig. 95A. the digital signature of 
a ticket issuer Is provided for data that consists of a 
receipt header 9500. which is header information indi- 

10 eating that the message is the receipt 5907 and describ- 
ing the data structure; a customer number 9501 ; ticket 
issuing Infamation 9502; a payment service code 9503; 
a payment value 9504; a payment option code 9505; a 
request number 9506; a transaction number 9507; 

75 clearing information 9508; a transaction processor ID 
9509; a ticket issuer ID 9510; and an issued time 951 1 , 
which indicates tiie date on which the receipt 5907 was 
issued. These data are closed and addressed to the 
service provider, thereby providing the receipt 5907. 

20 The ticket issuing information 9502 is inf6rmatk)n con- 
cerning tiie ticket issuing process performed by tiie 
ticket issuing system, and is accompanied by the digital 
signature of tiie ticket issuer. 

[1596] Upon receiving the receipt 5907, the ticket 

25 issuer processor of tiie service provkiing system 110 
decrypts it and examines the digital signature, and 
tiansmits a receipt 9512 to the service director proces- 
sor. The service director processor emptoys the receipt 
9512 to generate a receipt 9523 for a user. 

30 [1597] In addition, the service director processor gen- 
erates a clearing completion notification 9430 for tiie 
ticket issuing system, generates an electrons ticket to 
be issued to the user, and further generates an etec- 
b-onic ticket issuing message 9227 tiiat includes the 

35 electronic tk:ket that is generated. 

[1598] The user processor closes the electronic ticket 
issuing message 9227 and tiie receipt 9523 while 
addressing tiiem to the user, and transmits tiiem as an 
electronic ticket issuing message 5908 and a receipt 

40 5909 to the mobile user terminal 1 00 via digital wireless 
communication. 

[1599] As is shown in Fig. 92B, the digital signature of 
a service provkler is provided for data that consist of an 
electronic ticket issuing header 9220. which is header 

45 information indicating that the message is tiie electronic 
ticket issuing message 5908 and describing the data 
structure; a tansaction number 9221 ; a request numt)er 
9222; the number of tickets 9223; elecf onic ticket data 
9224 that are generated; a service provider ID 9225; 

50 and an issued time 9226. which indicates the date on 
which the electonic ticket issuing message 5908 was 
issued. These data are closed and addressed to ttie 
user, tiiereby providing the electonic ticket issuing mes- 
sage 5908. The electronic ticket data 9224 includes 

55 electronic tickets 9231 equivalent in number to the 
number of tickets 9223. 

[1600] As is shown in Fig. 95B, the digital signatjre of 
a service provkJer is provided for data that consists of a 
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- receipt header 951 6,- which is header information indi- 
cating that the message is the receipt 5909 and describ- 
ing the data structure; a user ID 9517; a receipt 9518 
(9512) obtained by decryption; clearing information 
951 9 for a user that is accompanied by the digital signa- s 
ture of a transaction processor; ticket issuing informa- 
tion 9520; a service provider ID 9521; and an issued 
time 9522, which indicates the date on which the receipt 
5909 was issued. These data are closed and addressed 
to the user, thereby providing the receipt 5909. The ro 
ticket issuing information 9520 is information for the 
electronic ticket issuing process performed by the serv- 
ice prcvicEng system, and is accompanied by the digital 
signature of the service provider. 

[1601] Upon receiving the electronic ticket issuing 75 
message 5908 and the receipt 5909, the mobile user 
terminal decrypts them and examines the digital signa- 
tures, enters in the ticket list 1712 an electronic ticket 
included in the electronic ticket issuing message 5908. 
enters the receipt 9523 in the use list 1715. and displays 20 
the electronic ticket on the LCD 303. 
[1602] The generation of an electronic ticket by the 
service director processor is performed as follms. 
[1603] First, the service director processor refers to 
the electronic ticket template list 4905 for the ticket ss 
issuer that is stored in the ticket issuer information 
server. Then, by using the electronic ticket template pro- 
gram that is identified by the template code 9206 of the 
electronic tk:ket issuing commission 5903, the service 
director processor generates a ticket program for an 5o 
electronic ticket. Specifically, the ticket program data 
1913 for an electrons ticket are generated using the 
transaction module and the display nruxiule. which are 
described as being located at the transaction module 
address 4919, and the display nxxjule address 4920 in 3S 
the electronic ticket template list 4905. and the repre- 
sentative component information 9209 in the electronic 
ticket issuing commission 5903. When the representa- 
tive compon^ information 9209 is not present in the 
electronic ticket issuing commission 5903. the default 4o 
representative component information focated at the 
default representative component information address 
4921 is employed as the information for an electronic 
ticket. 

[1604] Following this and based on the usage condi- 4s 
tion infonnation included in the ticket information 9217. 
the service director processor generates the ticket sta- 
tus 1907 and the variable ticket information 1908. 
Whether the ticket status 1907 can be transferred is 
designated, and when the ticket is used as a coupon so 
ticket, the number of coL4X)ns is employed as the varia- 
t>le ticket information 1 907. The service director proces- 
sor generates a new pair consisting of a ticket signature 
private key and a ticket signature publk; key, and further 
generates the ticket program 1901 for an electronic ss 
ticket by employing the ticket private key and the gate 
public key that are registered in the electronic ticket 
management information 5300. 


[1605] Furthernxire, the service director processor 
generates an electronic ticket by enploying the 
otrtarned ticket signature public key to generate the cer- 
tificate 1903 for the electronic ticket, and by employing 
the ticket data 9219 Jn the electronic ticket issuing com- 
mission 5903 to generate the presentation ticket 1902 
for the electronic ticket. 

[1606] The procedures for the delayed clearing will 
now be described. 

[1607] In Fig. 60 are shown the procedures for 
exchanging messages between the devices in the ticket 
purchase process tor the delayed clearing. The same 
process is performed as is used for the spontaneous 
clearing until the ticket issuing sy^em transmits the 
electronic ticket issuing commission to the service pro- 
viding system. 

[1 608] When the delayed clearing is designated by the 
clearing option 9203. the service director processor 
generates an electronic ticket to be issued to the user, 
and also generates the electronfo ticket issuing mes- 
sage 9227, which Includes the generated electronic 
ticket, and a tenrtporary recepi message 9310. which 
corresponds to a temporary receipt. The generation of 
the electronic ticket is performed in the same manner as 
that used for the spontaneous clearing. 
[1 609] The user processor closes the electronic ticket 
issuing message 9227 and the temporary receipt 9310 
and addresses them to the user, and transmits these 
messages as an electronic ticket issuing message 6004 
and a temporary receipt 6005 to the nrwbile user tenni- 
na) 100 via digital wireless telephone communication. 
[1610] As is shown in Fig. 93 A, the digital signature of 
a service provider is provided for data that consists of a 
temporary receipt header 9300, which is header infor- 
mation indicating that the message is the tenrporary 
receipt 6005 and describing the data structure; a user 
ID 9301: ticket issuing information 9302; a payment 
service code 9303; a payment value 9304; a payment 
option code 9305; a request numbo^ 9306; a transaction 
number 9307; a sen^ice provider ID 9308; and an issued 
time 9309, which indicates the date on which the tempo- 
rary receipt 6005 was issued. These data are closed 
and addressed to the user, ther^y providing the tempo- 
rary receipt 6005. The ticket issuing Information 9302 is 
information concerning the electronic ticket issuing 
process that is performed by the service providing sys- 
tem, and is accompanied by the digital signature of the 
service provider. 

[1611] The data structure of the electronic ticket issu- 
ing message 6004 is the same as that used for the elec- 
tronic ticket issuing message 5908. 
[1612] Upon receiving the electronic ticket issuing 
message 6004 and the temporary receipt 6005, the 
mobile user terminal decrypts them and examines the 
digital signatures, enters an electronic ticket included in 
the electronic ticket Issuing message 6004 in the ticket 
list 1712. enters the terrporary receipt 9810 in the use 
list 1715, and displays the electronic tktet on the LCD 
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303. 

[1613] Following this, the service director processor 
performs the clearing process for the price of the ticket. 
First the service director processor generates a clear- 
ing request-9324, whidi is a message- requesting the 5- 
performance of the clearing process for the price of the 
ticket The transaction processor doses the dearing 
request 9324 and addresses it to the transaction proc- 
essor, and transmits rt as a dearing request 6007 to the 
transaction processing system 106. io 
[1614] Upon receiving the clearing request 6007, the 
transaction processing system 106 deaypts it and 
examines the digital signature, and performs the clear- 
ing process. The transaction processing system 106 
generates a dearing completion notification 6008 and is 
transmits it to the service providing system 110. 
[1615] Upon receiving the dearing completion notifi- 
cation 6008, the transaction processor processor of the 
service prcvkiing system 110 decrypts it and examines 
the digital signature, and transmits a dearing comple* 20 
tton notification 9413 to the service director processor. 
The service director processor employs the received 
dearing conrpletion notification 9413 to generate a 
dearing completion notification 9430 for the tcket 
issuer. And the ticket issuer processor ck>ses the clear- 2s 
ing completion notification 9430 and transmits it to the 
ticket issuing system 107 as a clearing completion noti- 
fication 6009 for the ticket issuer. 
[1 61 6] The ticket issuing system decrypts the received 
dearing completion notification 6009 and examines the 30 
digital signature, and generates a receipt 6010 and 
transmits it to the service provkJing system. 
[1617] The ticket issuer processor of the service pro- 
vkjing system decrypts the received receipt 6010 and 
examines the digital signature, arvJ transmits a receipt 35 
9512 to the service director processor. The service 
director processor enrploys the receipt 951 2 to generate 
a receipt 9523 for a user. 

[1618] The receipt 9523 that is generated is not inme- 
diately transmitted to the mobile user terminal 100 of 40 
the user. When the nrxibile user terminal has performed 
the data updating process, the user processor replaces 
the temporary receipt 9310 in the use list 1715 vtnth the 
receipt 9523, and transmits the receipt 9523 as one part 
of the update data 601 1 to the mobile user terminal 100. 4s 
[1619] The data structures of the clearing request 
6007. the clearing completion notification 6008, the 
dearing cornpletton notification 6009 and the recept 
6010 for the delayed clearing are the same as those 
provkJed for the dearing request 5904. the dearing so 
completion notificatton 5905. the dearing completion 
notification 5906 and the receipt 5907 for the spontane- 
ous clearing. 

[1620] The delayed clearing process need not be per- 
formed immediately after the electronic ticket is issued, ss 
and together with the other clearing processes, may be 
performed, for example, once a day. 
[1621] An explanation will now be given for the con- 


tents of messages that are exchanged by the mobile 
user terminal 1 00 and the sen/ice providing system 1 1 0 
during the ticket registration processing. 
[1622] In Fig. 65A are shown the procedures for 
exchanging messages between devices in the -ticket 
registration processing, and in Figs. 106Aand 106B are 
shown the contents of messages that are exchanged by 
the devices in the ticket registration processing. 
[1623] First, when the user performs an electronic 
tk:ket registration operation 6500. the mobile user termi- 
nal generates a ticket registration request 6501 and 
transmits It to the service providing system via digital 
wireless telephone communication. 
[1624] As is shown in Fig. 106A. the digital signature 
of a user is provided for data that consists of a ticket reg- 
istration request header 10600. which is header infbr- 
nuition indicating that the message is the ticket 
registration request 6501 and describing the data struc- 
ture; a ticket ID 10601 of a ticket to be registered; a user 
ID 10602; and an issued time 10603. which indicates 
the date on whk^h the ticket registration request 6501 
was issued. These data are ctosed and addressed to 
the service provider, thereby provkiing the ticket regis- 
tration request 6501. 

[1625] The user processor of the service provkjing 
system decrypts the received ticket registration request 
6501 and examines the digital signature, and transmits 
the request 6501 to the servtee manager processor. 
The service manager processor generates a service 
director processor to form a process group that proc- 
esses a ticket registration request 10604. The service 
director processor ascertains tfiat the electronic ticket 
indicated by the ticket ID 1 0601 is registered in the ticket 
list 4610 for the user in the user information server 902. 
and registers that electronic ticket in the registered 
ticket list 5303 for electronic tickets of the service direc- 
tor infornnation server 901. At this time, the service 
director processor newly generates a ticket signature 
private key and a ticket signature put>lic key pair. Fur- 
ther, the service director processor generates a regis- 
tered ticket certificate using the ticket signature public 
key. and registers it in the registered ticket list 5303. The 
service director processor then generates a ticket certif- 
icate issuing message 13313 using the ticket signature 
private key and the registered ticket certificate that has 
t>een generated. The user processor ck>ses the ticket 
certificate issuing message 13313 and addresses it to 
the user, and transmits it as a ticket certificate issuing 
message 6502 to the mobile user terminal via digital 
wireless telephone communication. 
[1626] As is shown in Fig. 1066, the digital signature 
of a service provkler is provkJed for data that consists of 
a ticket certificate Issuing header 10608. which Is 
header information indicating that the message is the 
ticket certificate issuing message 6502 and describing 
the data structure; a ticket digital signature private key 
10609; a registered ticket certificate 10610; a service 
provkjer ID 10611. and an issued time 10612. which 
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indicates the date on which the ticket certificate issuing 
message 6502 was issued. These data are closed artd 
addressed to the user, thereby providing the ticket cer- 
tificate issuing message 6502. 

[1627] The mobile user terminal 100 decrypts the s 
received tk:ket certificate issuing message 6502 and 
exarrtines the digital signature, replaces the ticket signa- 
ture private key and the ticket certificate of an electronic 
ticket with the ticket signature private key 1 0609 and the 
registered ticket certificate 10610, both of which are io 
included In the ticket certifk:ate issuing message 6502, 
changes the registration state in the ticket status to the 
post-registratbn state, and displays on the LCD the 
electronk: ticket that has been registered (display a 
ticket that is re^stered; 6503). is 
[1628] An explanation will now be given for the con- 
tents of messages that are exchanged by the gate ter- 
minal 101 €md the servrce provicfing system 1 10 during 
the ticket seti^ processing. 

[1629] In Fig. 66 are shown procedures for exchang* zo 
ing messages between the devices in the ticket seti^) 
processing performed when the merchant sets up. at 
the gate tenminal 101, a ticket to be examined. In Figs. 
109A and 109B are the contents of messages that are 
exchanged by the devices during the ticket setup 2S 
processir>g. 

[1 630] First, when the operator (merchant) of the gate 
terminal 101 performs a ticket setup operation 6600, tiie 
gate tenninal generates a ticket setup request 6601 and 
transmits it to tiie servk:e provkJing system via digital so 
telephone communrcation. 

[1631] As is shown in Fig. 109A. the digital si^ture 
of a merchant is provkJed for data that consists of a 
ticket setip request header 10900, whk;h is header 
informatkin indk:ating tiiat the message is the ticket 35 
setup request 6601 and describing the data structure; a 
ticket code 10901 entered by the merchant during the 
ticket setup operatk>n 6600; a gate ID 1 0902 for the gate 
tenninal: a merchant ID 10903; and en issued time 
10904, which indk^tes the date on which the ticket 4o 
setup request 6601 was issued. These data are closed 
and addressed to the service provider, tiiereby provki- 
ing the tkkei setup request 6601 . 
[1 632] The merchant processor of the service provid- 
ing system deaypts the received ticket setup request 4s 
6601 and examines the digital signature, and transmits 
the request 6601 to tiie service manager processor. 
The service manager processor generates a service 
director processor to form a process group that proc- 
esses a ticket setup request 1 0605. The service director so 
processor ascertains that a merchant is registered in 
the merchant list 5302 for the electronic tkkBt that is 
ktentifled by the ticket code 10901 for the sendee direc- 
tor information server 901. Then, the sewice director 
processor generates a ticket setup message 10919 by ss 
refen^ing to the electronic XkkeX management informa- 
tion 5300, which is stored in the service drector infor- 
mation server 901 for the pertinent electronic ticket, and 


the electronic ticket template list 4905, which is stored in 
the ticket issuer information server 905 of the pertinent 
ticket issuer (the ticket issuer ID 5306). Specifically, tiie 
service director processor generates the ticket setup 
message 10919 by using tiie ticket examination module, 
which is located at the ticket examinatfon module 
address 4922 in the electronic ticket template list 4905 
that is kientified by the template code 5312 of the elec- 
tronic ticket management information 5300. and the 
ticket public key 5309 and the gate private key 5310. 
which are registered in tiie electronk; ticket manage- 
ment information 5300. The merchant processor doses 
the tk^ket setup 1 09 1 9 and addresses it to the merchant, 
and transmits it as a ticket setup message 6602 to tiie 
gate terminal via digital telephone communication. 
[1633] As is shown in Fig. 109B. the digital signature 
of a service provkier is provided for data that consists of 
a ticket setup header 10909, which is header informa- 
tion indfoating that the message is the ticket setup mes- 
sage 6602 and describing tiie data structure: a ticket 
name 1 091 0 for an electronk; ticket to be issued: a ticket 
code 10911: a ticket issuer ID 10912; a validity term 
10913; a gate private key 10914; a ticket public key 
10915; a ticket exan^nation module 10916; a servfoe 
provider ID 10917; and an issued time 10918, which 
indk:ates tiie date on which the ticket setup message 
6602 was issued. These data are closed and addressed 
to the merchant thereby providing the ticket setup mes- 
sage 6602. 

[1 634] The mobile user tenninal decrypts the received 
ticket setup message 6602 and examines the digital sig- 
nature, registers, in the ticket list 2409, electronic ticket 
examinatron program information that is included in the 
ticket setup message 6602, and displays on the touch 
panel LCD a message indkating that tiie ticket setup 
process has been completed (display the setup comple- 
tion; 6603). 

[1635] An explanation wilt now be given for the con- 
tents of messages that are exchanged by the mobile 
user tern^nal 100 and the gate terminal 101 during tiie 
ticket examination processing. 
[1636] In Fig. 67 are shown procedures for tiie 
exchange of messages by the devices during the ticket 
examination processing, and In Figs. 11 OA and 11 OB 
and Figs. lllAand lllBare the contents of the mes- 
sages that are exchanged by the devices during tiie 
ticket examination processing. 
[1637] First, when a user performs a ticket presenta- 
tion operation 6700, the mobile user terminal generates 
a ticket presentation message 6701 by using an elec- 
tronic ticket to be examined and an arbitrarily generated 
test pattern, and transmits it to the gate tenninal via 
infrared conrvnunication. 

[1638] As is shown in Fig. 1 10A. the ticket presenta- 
tion message 6701 consists of a ticket presentation 
header 11000, which is header infonnation indicating 
tiiat ttie message is tiie ticket presentation message 
6701 and desaibing the data structure: a service code 
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11 001, which identrfies the request for the examination 
of an electronic ticket; a request number 1 1002, which is 
an artxtrarily generated nunr^r that uniquely repre- 
sents the ticket examination process; a ticket 11 003 for 
presenting an etectronic ticket to be examined; a ticket 
certificate 11004; the current ticket status of an elec- 
tronic ticket that is to be examined; variable ticket infor- 
waXion 1 1006; a ticket ID 1 1007; an issued time 1 1008. 
which indicates the date on which the ticket presenta- 
tk)n message 6701 was issued: and a gate test pattern 
11010, which is an artMtBrily generated test pattern. 
The digital signature is provkied, using the ticket signa- 
ture private key of an etectronic tktot for the ticket sta- 
tus 11005, the variable ticket information 11006, the 
ID 11007 and the issued time 11008. The gate 
test pattern is encrypted using the gate pi^k; key 
[1639] The presentation ticket 1 1 003. the ticket certif- 
icate 1 1004, the ticket status 1 1005, the variable ticket 
infomiation 11006, the ticket ID 11007 and the issued 
date 1 1008 specify the contents of the electronic ticket 
for the gate terminal, and the gate test pattern 1 1010 is 
a test pattern for authorizing the gate terminal. 
[1640] Upon receiving the ticket presentation mes- 
sage 6701 , first, the gate terminal refers to the ticket list 
2409, activates a ticket examination module that oorre- 
spends to the ticket code of tiie electronic ticket that is 
presentation, examines tiie validity of the contents of 
the ticket presentation message 6701 , and generates a 
tk:kBt examination message 6702 and transmits it to the 
nrx)bile user terminal via infrared communication. 
[1641] In the verification process for the validity of the 
tki<et presentation message 6701. the gate terminal 
employs the fact that the tick^certifk:ate 11004 isareg- 
istered ticket certifk^ate and examines the ticket status 
11005 and the variable ticket information 11006 to 
determine whether an electronic tkitet that is to be 
examined is valid. Then, the gate terminal examines the 
presentation ticket 11003. the digital signature of the 
service provkjer that is provkjed for the ticket certificate 

1 1004. and the validity term. Further, the gate terminal 
errploys the ticket signature publk; key of the ticket cer- 
tifk»te 11004 to examine the digital signature of the 
electronic ticket that is provided for the ticket status 

11005, the variable ticket information 11006, the ticket 
ID 11007, and the issued time 11008. Thus, the validity 
of the ticket presentation message 6701 is verified. 

[1 642] In the generation of the ticket examination mes- 
sage 6702, the gate terminal decrypts the gate test pat- 
tern 11010 using the gate private k^, and employs the 
tkicet public key to encrypt the ticket test pattern 1 1 108 
that is arbitrarily generated. 

[1643] As is shown in Fig. 1 10B, the digital signature 
of a merchant is provided for the data that consists of a 
examination header 1 1012, which is header infor- 
mation indicating that the message is the ticket exami- 
nation message 6702 and descrbing the data structure; 
a transactbn mrvber 11013; a response message 
11014; a request number 11015; a tktot ID 11016; an 


instruction code 11017; a gate test pattern 11018, 
which is decrypted; a ticket test pattern 1 1019. which is 
an arbitrarily generated test pattern; a gate ID 1 1021 ; a 
merchant ID 11022; and an issued time 11023. which 

5 indicates tiie date on which the ticket examination mes- 
sage 6702 was issued. Thus, the ticket examination 
6702 is provkjed. The ticket test pattern 11019 is 
encrypted using tiie ticket public key 
[1644] The transaction numt>er 11013 is a number, 

10 art>itrarity generated by the gate terminal, that uniquely 
represents the ticket examination process. When, as a 
result of tiie examination of the ticket presentation mes- 
sage 6701. the tk:ket examination process can not be 
performed (the electronic ticket is one tfiat can not be 

75 examined by the pertinent gate terminal), a value of 0 is 
set. When the ticket examination process can be per- 
formed, a value other than 0 is set. 
[1645] The response message 1 1014 is text infomia- 
tion constituting the message transmitted by the mer- 

20 chant to the user. When the gate terminal can not 
examine an electixxiic ticket tiiat is presented (transac- 
tion numl^er = 0). data to tiiat effect is included in the 
response message. The response message is option- 
ally set and may not be reset. 

2S [1646] The instruction code 1 1017 is command code 
information for an electronic ticket that indk^ates how the 
ticket status arxl variable ticket informatk)n of the elec- 
tronic ticket can be changed. The instruction code is 
varied by combining the electt)nk: tidcet transaction 

30 module and the ticket examination module. 

[1647] When tiie mobile user terminal receives tiie 
ticket examination message 6702, first, in order to verify 
the gate terminal the mobile user terminal compares the 
gate test pattern 11010 with the gate test pattern 11018 

35 included in the ticket examinatbn message 6702, and 
changes the ticket status and the variable ttckeX informa- 
tion of the electronic ticket in accordance witii tiie 
inshxiction code 11017. Then, tiie mobile user terminal 
decrypts the ticket test patten using the ticket private 

40 key. generates a ticket examination response 6703, and 
ti*ansmrts it to tiie gate terminal via infrared communica- 
tion. 

[1648] As is shown in Fig. 1 1 1 A, the digital signature 
using the ticket signature private key and the digital sig- 

46 nature of a user are provided for the data that consist of 
a ticket examination response header 11100. which is 
header information indicating that the message is the 
ticket examination response 6703 and desaibing the 
data structure; a tk^et examination number 11101, 

so which indicates tiie order of the ticket examination proc- 
ess; a ticket test pattern 1 1 102, which is decrypted; a 
ticket status 11103 and variable ticket information 
1 1 104. which are modified; a gate ID 1 1 105; a merchant 
ID 11106; a request number 11107; a ti^ansaction 

55 number 11108; a ticket code 11109; a ticket ID 11110; 
and an issued time 11111. which indk:ates the date on 
which tiie ticket examination response 6703 was 
issued. In this fashion, the ticket examination response 
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6703 is provided. 

[1649] Upon receiving the ticket examination 
response 6703, first, the gate terminal authorizes the 
electronic ticket by comparing the ticket test pattern 
111019 with- the tick^ test pattern 11102 -that is 
included in the ticket examination response 6703, 
examines the validity of the contents of the ticket exam- 
ination response 6703, and generates an examination 
certificate 6704 and transmits it to the mobile user ter- 
minal via infrared communication. 
[1 650] In the verification process for the validity of the 
ticket examination response 6703. the gate terminal 
determines whether the ticket status 1 1 1 03 and the var- 
iable ticket informatkin 11104 have fc>een changed in 
accordance with the instruction code 1 1 107. and exam- 
ines the digital signature of the ticket examination 
response 6703. 

[1651] As is shown in Fig. 1 1 1 B, the digital signature 
of a merchant Is provided for the data that consist of an 
examination certificate header 11113. which is header 
informatk)n indicating that the message is the examina- 
tion certificate 6704 and describing the data structure; 
examination infamation 11114. which is text informa- 
tion indicating the contents of the tx^ket examination 
process; a ticket ID 11115; a request nunt)er 11116; a 
transaction rujmber 1 1 1 17; a ticket examination number 
1 11 187; a gate ID 1 1 1 19; a merchant ID 1 1 120; and an 
issued time 11121. which indicates the date on which 
the examinatjon certrficate 6704 was issued. In this 
fashksn. the examination certrficate 6704 is provided. 
[1652] Upon receiving the examination certificate 
6704, the mobile user terminal increments the tkrket 
examination number, registers the examination certifi- 
cate 6704 as usage informatton in the use list 1 71 5. and 
displays the examined electronic ticket on the LCD (dis- 
play the examined ticket; 6706). 
[1653] When the gate terminal has transmitted the 
examination certifk;ate 6704. the gate terminal regis- 
ters, in the transaction list 2510. the ticket examination 
response 6703 as history information for the ticket 
examination process, and displays the results obtained 
during the ticket examination process on the touch 
panel LCD (display the results of examination; 6705). 
When the gate opening/closing device is connected to 
the gate terminal, the gate is automatically opened 
(entrance permissk)n 6707). 

[1654] An explanation will new be given for the con- 
tents of messages that are exchanged by the devices 
during the ticket reference processing. 
[1655] In Fig. 71 are shown procedures for the 
exchange of messages by the devrces during the ticket 
reference processing, and in Figs. 88A to BSD and Fig. 
116A are shown the contents of messages tfiat are 
exchanged during the ticket reference processing. 
[1656] The trcket refererx:e processing is not per- 
formed in accordance with a special processing 
sequence, but is performed in the data updating proc- 
ess during which the service providing system updates 


the data in the gate terminal. 
[1 657] Therefore, for the ticket reference process, the 
procedures for the exchange of messages by the gate 
terminal and tiie sen/ice providing system, and the con- 

5 4ent5 (data structures) of the messages to be 
exchanged are the same as those employed for the 
above described data updating processing. 
[1658] Compressed upload data 8818 in the upload 
data 5702 include a ticket examinatk)n response that is 

10 newly registered in the transaction list 2510 during the 
ticket examination process conducted during the period 
extending from the previous perfonmance of the data 
updating process to the current performance of the data 
updating process. 

75 [1659] During the data updating processing, the mer- 
chant processor transmits, to the service manager proc- 
essor, a message requesting the reference process be 
performed for the ticket examination response that is 
uploaded from the gate terminal. The service manager 

20 processor generates a servrce director processor to 
form a process group for examining the validity of tiie 
ticket examination response. 
[1 660] First, the servk:e director processor determines 
whether the gate ID 1 1 105 and the merchant ID il 106 

2S in the ticket examination response match the gate ID 
5215 Of the merchant and the merchant ID 5214. Then, 
tiie service directa processor examines tiie registered 
ticket list 5303 in the service director information server 
901 to verify that the electronic ticket for which the ticket 

30 examination response was issued is registered. Tbe 
servk:e director processor emptoys the user publk: key 
5323 to examine the digital signature of the user that 
acconrpanies the ticket examination response, and 
employs the registered ticket certificate to examine the 

35 digital signature for the ticket that accompanies the 
ticket examination response. In addition, the service 
director processor employs tiie ticket examination 
numt>er when examining the matching of the ticket sta- 
tus witii the variable ticket infonmation that has been 

40 modified, and transmits tiie result of the examination to 
tiie merchant processor. As a result, tiie ticket examina- 
tion response is registered in the ticket examination 
response list. 

[1661] The merchant processor enters the received 
45 ticket reference results in the compressed update data 
8828 in the update data 5705. and transmits the data 
5705 to the gate terminal. 

[1 662] When an enor occurs in the process for verify- 
ing the validity of the ticket examinatbn response, tiie 
50 service director processor transmits a message indicat- 
ing that an error occurred in the management system 
908. 

[1663] Upon receiving the update data 5705. tiie gate 
terminal decompresses the update data 8828 and 
55 updates tiie data in the RAM and on the hard disk. At 
tills time, tiie ticket reference results are registered in 
tiie autiiorization report list 251 1 of the gate terminal. 
[1664] If tiie firm represented by the merchant differs 
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from that represented by the ticket issuer and a pay- 
ment is made by the ticket issuer to the merchant who 
handles the ticket, or if the usage of the ticket is period- 
ically reported to the ticket issuer in accordance with the 
terms of a contract, in accordance with the ticket exam- 
ination response that is newly registered in the ticket 
examination response list, the service director proces- 
sor generates weekly, for example, a usage condition 
notification 11 606, which is a message for notifying the 
ticket issuer of the ticket usage condition. The ticket 
issuer processor closes the notification 11606 and 
addresses it to the ticket issuer, and transmits it as a 
usage report 7100 to the ticket issuing system 107. 
[1665] As is shown in Fig. 1 16A, the digital signature 
of a service provider is provkied for the data that con- 
sists of a usage report header 1 1600. which is header 
information indicating that the message is the usage 
report 7100 and describing the data structure; a ticket 
ID list 1 1601 of tickets that are employed; the merchant 
name 1 1602 and the merchant ID 1 1603 of a merchant 
that handles the ticket; a service provider ID 1 1604; and 
an issued time 11605, which indicates the date on 
whk;h the usage report 7100 was issued. These data 
are closed and addressed to the tk^ket issuer, thereby 
prcvkjing the usage report 7100. 
[1666] Upon receiving the usage report 7100. the 
tteket Issuing system 107 decrypts it and examines the 
digital signature, and performs such processing as mak- 
ing a payment to the merchant. 
[1667] An explanation will now be given for the con- 
tents of messages tiiat are exchanged by tiie devices 
during the ticket transfer processing. 
[1668] In Rg. 74 are shown procedures for the 
exchange of messages by the devices during the ticket 
transfer processing, and in Figs. 117A and 117B, 118A 
and 1 18B, and 1 19A and 1 19B are shown the contents 
of messages that are exchanged during the ticket trans- 
fer processing. The ticket transfer process can be per- 
formed when the ticket status 1907 of the electronic 
tKket indicates the transfer enabled state, which is des- 
ignated by the ticket issuer when issuing a ticket. 
[1669] In Fig. 74 is shown a case where user A trans- 
fers an electronic ticket to user B. The procedures for 
the exchange of messages by the devices belonging to 
users A and B are the same for infrared comnujnication 
as they are for digital wireless communication. The data 
structures of messages are also the same. 
[1670] In Fig. 74, first, when user A performs a ticket 
transfer process 7400, the mobile user terminal of user 
A transmits a ticket transfer offer 7401 , which is a mes- 
sage offering to transfer an electronic ticket, to the 
nrK3bile user terminal of user B. When at this time the 
nfKsbile user terminals of user A and user B are con- 
nected, communication between user A and user B is 
performed via digital wireless telephone. When the 
mobile user terminals are not connected, infrared com- 
munication is enployed. 

[1671] As is shown in Fig. 1 17A, the digital signature 


of user A is provided for the data consisting of a ticket 
transfer offer header 1 1 700, which is header information 
indicating that the message is the tkicet transfer offer 
7401 and describing the data structure: a transfer offer 
- 5 - number 1 :J 701 , which is an arbitrarily generated numk)er 
that uniquely represents tiie ticket transfer process; a 
presentation ticket 11702 and a ticket certificate 11703 
for an electronic tki^et to be transfen^ed; a ticket status 
11704; variable ticket information 11705; a ticket ID 

10 1 1706; an issued tinf>e 1 1 707. which indicates the date 
on wHch the ticket transfer offer 7401 was issued: and 
a user public key certificate 11709. In this fashion, the 
ticket transfer offer 7401 is provkied. The digital signa- 
ture of the electronic ticket is provided, using the ticket 

15 signature private key, for the ticket status 11704. the 
vari£ible ticket information 11705, the tk:ket ID 11706 
and tiie issued time 1 1707. 

[1672] The digital signature of the service provider is 
provkjed for the data that consist of a user public key 

20 header 11710; the user pLi>lic key 11711 of user A; a 
public key certifk^te ID 11712, whk:h is ID information 
for tiie pubJk; key certificate; a certificate validity term 
11713; a service provider ID 11714; and a certificate 
issued time 11715. In this fashion, the user public key 

25 certificate 1 1 709 is provided. 

[1673] Upon receiving the ticket transfer offer 7401 . 
the mobile user terminal of user B examines the presen- 
tation ticket 11702, the ticket certified 11703, and the 
digital signature of the service provider and the valklity 

30 term of the pM\c key certificate 11709. Then, tiie 
nrK)bile user terminal examines the digital signature of 
the electronk: tk:ket that is provkJed for the tk:ket status 
11704. tiie variak)te ticket information 11705, the ticket 
ID 11 706 and the issued time 11707, and the digital sig- 

35 nature of user A accompanying tiie tk;ket transfer offer 
740 1 , and verifies the contents of the ticket t-ansfer offer 
7401 . In accordance with ttie presentation ticket 1 1 702, 
the ticket status 1 1 704 and the variable ticket informa- 
tion 11705, the nrxDbtle user terminal then displays, on 

40 tiie LCD. the contents of the electronk; ticket tiiat is to be 
transferred (display the transfer offer; 7402). 
[1674] When user B performs a transfer offer accept- 
ance operation 7403. the mobile user terminal of user B 
tiansmits, to the mobile user terminal of user A, a ticket 

45 transfer offer response 7404, which is a response mes- 
sage for the ticket transfer offer 7401 . 
[1675] As is shown in Fig. 117B. the digital signature 
of user B Is provided for the data tiiat consist of a ticket 
transfer offer response header 11716, which is header 

50 information indicating that the message is tiie ticket 
transfer offer response 7404 and describing tiie data 
structure; an acceptance number 1 1 71 7; a transfer offer 
number 1 1 71 8; a tidtet ID 1 1 71 9; an issued time 1 1 720, 
which indk:ates the date on which tiie \kkeX transfer 

55 offer response 7404 was issued; and a user put)lic key 
certificate 1 1 721 . In this fashion, the ticket transfer offer 
response 7404 is provkjed. 

[1676] The user public key certificate 1 1 721 is a public 
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key certtficate for user B. To provide this certificate 
11721, the digital signature of the service provider is 
provided for the data that consist of a user public key 
certificate header 11722; a user public key 11723 for 
user B; a public key certificate ID 11724, which is ID 5 
infornfiatton for tfie public key certificate: a certificate 
validity term 11 725; a service provider ID 1 1726; and a 
certificate issued time 11 727. 
[1677] The acceptance number 11717 is aitttrarily 
generated, by the nnobile user terminal of user B. as a 10 
number that uniquely represents the ticket transfer 
processing. With this number, the nnobile user temrvnal 
of user A is notified as to whether user B has accepted 
the ticket transfer offer 7401. When user B does not 
accept the ticket transfer offer 7401 . a value of 0 is set is 
as the acceptance number 11717. When user B 
accepts the ticket transfer offer 7401 , a value other than 
0 is set. 

[1678] Upon receiving the ticket transfer offer 
response 7404, the mobile user terminal of user A dis- 20 
plays, on the LCD. the contents of the ticket transfer 
offer response 7404 (display the transfer offer response; 
7405). When the ticket transfer offer 7401 is accepted 
(aoceptance number 1 1 71 7 0), the mobile user termi- 
nal of user A examines the digital signature of the serv- 2s 
ice provider of the user public key certificate 1 1 721 and 
the validity term. The mobile user terminal generates a 
ticket transfer certificate 7406. which is a message that 
corresponds to a transfer certificate for an electronic 
ticket to user B, and transnvts it to the mobile user ter- 30 
minal of user B. 

[1679] As is shown in Fig. 1 18A, the digital signature 
of the electronk; ticket and the digital signature of user A 
are provided for the data that consist of a tk;ket transfer 
certificate header 11800, whk;h is header information 35 
indicating that the message is the ticket transfer certifi- 
cate 7406 and descrit»ng the data structure; a presen- 
tation ticket 11801 for an electronic ticket to be 
transferred; a ticket status 11802; variable ticket infor- 
mation 11803; a transfer offer number 11804; an 40 
acceptance number 11805; a pubik: key certificate ID 

1 1806 for the user public key certtficate of user B; a pub- 
lic key certificate ID 1 1807 for the user public key certif- 
icate of user A; a ticket ID 1 1808; and an issued time 
11809, which indicates the date on which the ticket 45 
transfer certificate 7406 was issued. These data are 
cbsed and addressed to user B, thereby providing the 
ticket transfer certificate 7406. 

[1680] Upon receiving the tk:ket transfer certificate 
7406, the mobile user terminal of user B decrypts it and so 
examines the digital signature of user A and the one 
accompanying the electrons ticket. Further, the mobile 
user terminal compares the ticket ID presented by the 
ticket transfer offer 7401 with the ticket ID 11808, and 
compares the public key certifk:ate IDs 11806 and ss 

1 1807 with the public key certificates of users B and A 
to verify the contents of the ticket transfer certifrcate 
7406. The mobile user terminal then generates a trcket 


transfer receipt 7407. which is a message indicating the 
electronic ticket has been received, and transmits the 
receipt 7407 to the mobile user terminal of user A. 
[1681] As is shown in Fig. 1 18B, the digital signature 
of user B is provided lor the data that consist of a ticket 
transfer receipt header 11815, which is header informa- 
tion indicating that the message is the ticket transfer 
receipt 7407 and describing the data structure; a ticket 
ID 1 1816; a transfer offer number 1 1817; an acceptance 
number 11818; a public key certificate ID 11819 for the 
user public key certificate of user A; a public key certifi- 
cate ID 1 1820 for the user publk: key certificate of user 
B; and an issued time 1 1821, which indicates the date 
on which the tkitet transfer receipt 7407 was issued. 
These data are closed and addressed to user A, 
thereby provkjing the ticket transfer receipt 7407. 
[1 682] Upon receiving the ticket transfer receipt 7407. 
the mobile user terminal of user A decrypts it, and 
examines the digital signature of user B. Further, the 
mobile user terminal compares the puUk; key certif rcate 
IDs 1 1819 and 1 1820 with the public key certificates of 
users B and A to verify the contents of the tk^et transfer 
receipt 7407. The mobile user terminal then erases the 
transferred electronk; ticket from the ticket list 1 71 2. and 
registers the ticket transfer receipt 1 1822 in use history 
1 715. At this time, addresses in the object data area at 
which the transfer offer number, the code information 
indk^ating the ticket transfer process, the issued time for 
the ticket transfer receipt 7407 and the ticket transfer 
receipt 11822 are stored are assigned to the request 
numt>er 1840 in the use list 1715. the servk:e code 
1841. the use time 1842 and the use information 
address 1843. 

[1 683] The mobile user terminal of user A displays, on 
the LCD, a message indicating the completion of the 
transfer process (display the transfer process; 7408). 
The process at the nnobile user terminal of user A 
(sender) is thereafter terminated. 
[1684] After transmitting the ticket transfer receipt 
7407. the mobile user terminal of user B displays the 
received ticket transfer certificate 1 181 1 on the LCD. In 
addition, the mobile user terminal displays a dialo^e 
message inquiring whetiier the transfer process with the 
service providing server (process for downloading the 
received electronic ticket from the service providing sys- 
tem) should be immediately performed (display the 
transfer certifrcate; 7409). 

[1685] The dialogue message has two operating 
menus: "transfer process request" and "cancel." Wfien 
"cancel" is selected, the transfer process perfbmrted 
with the service providing server Is canceled, and in tiie 
process (data ifxlating process) during wfvch the serv- 
ice providing system updates the data in the mobile 
user terminal, an electronic ticket that has been trans- 
ferred is assigned to tiie mobile user terminal. 
[1 686] When user B selects "tansfer process request" 
(transfer process request operation; 7410), based on 
the ticket transfer certificate 1 181 1 the mot>ile user ter- 


139 


277 


EP0950 968A1 


278 


mtnal generates a ticket transfer request 741 1 , which is 
a message requesting tiiat the transfer process t>e per- 
formed with the service providing system, and transmits 
it to the service providing system via digital wireless tel- 
ephone communication. 

[1687] As is shown in Fig. 1 19A, the digital signature 
of user B is provided for the data that consists of a ticket 
transfer request header 11900. which is header infor- 
mation indicating that the message is the ticket transfer 
request 7411 and descrit)ing the data structure, a 
decrypted ticket transfer certificate 11901 (11811); the 
user ID 11902 of user B; and an issued time 11903. 
which indicates the date when the ticket transfer request 
741 1 was issued. These data are closed and addressed 
to the service provider, thereby providing the ticket 
transfer request 741 1 . 

[1688] Upon receiving the ticket transfer request 741 1 . 
the user processor of user B of the service providing 
system 1 10 decrypts it and examines the digital signa- 
ture, and transmits it to tiie servk^e manager processor. 
The sennce manager processor generates a service 
director processor to fam a process group for process- 
ing tiie ticket transfer request 1 1 904. 
[1689] The servrce directa processor, first refers to 
the user list 5200 and specifies the recipient (user B) 
and the sender (user A) of the transfer process by 
employing the public key certificate \Dg 11806 and 
11807 in the ticket transfer certifk^ate 11901 that is 
included in tiie ticket transfer request 11904. The serv- 
ice director processor examines the digital signature of 
the user A and the digital signature acoonpanying the 
electronic ticket, which are provkied for the ticket trans- 
fer certificate 1 1 901 , and verifies the valkiity of the ticket 
transfer certificate 11901. Folkmring this, the service 
director processor exchanges the user ID 5317 for the 
user A with that for the user B in the user list 5301 for the 
electronic ticket that is stored in the service director 
information server 901 . and erases the electronic ticket 
to be transferred from the tk:ket list of the user A that is 
stored in the user information server 902. Then, tiie 
service director processor changes the ticket signature 
private key and tk^ket signature public key pair and the 
tfoket certificate for a new key pair and a ticket certifi- 
cate, and also changes the ticket status and the variable 
tk:ket information to the ticket status 1 1802 and to tiie 
variable ticket information 11803 for the ticket transfer 
certificate 11901 . The service director processor gener- 
ates an electronic ticket received from user A. and 
enters it in the ticket list 4610 for ttie user B. 
[1690] When the electronic ticket that is to be trans- 
ferred has already t)een registered, the service director 
processor updates the registered ticket list 5303 holding 
the electronk; ticket. Specifically, tiie user ID 5322. the 
user put3(k; key 5323. the registered tktot certificate 
address 5324. tiie ticket examination response list 
address 5325 and the former user information address 
5326, all of which are in the registered ticket list 5303. 
are updated (to the information for user B). The old 


information (infomnation for user A) is pointed to at the 
former user information address 5326 as former user 
information 5327. 

[1691] The service director processor generates a 

5 ticket transfer message 11915. which includes an elec- 
ti-onic MvaX transfen'ed from user A. The user processor 
of user B closes the message 1 1915 and addresses it to 
tiie user B, and transmits it as a ticket transfer message 
7412 to the mok}ile user terminal of user B via digital 

10 wireless telephone communication. 

[1692] As is shown in Fig. 1 19B. tiie digital signature 
of the service provider is provkied for the data that con- 
sist of a ticket transfer header 11908. which is header 
information indicating that tiie message is the ticket 

15 transfer 741 2 and descritxng tiie data structure; a trans- 
fer number 11909, which is an arbrtrarity generated 
raimber that represents tiie transfer process in the serv- 
ice provkJing system; transfer information 11910; an 
acceptance number 11911; an electronk; XkkeX 11912. 

20 whk:h is transferred; a servk;e provider ID 11913; and 
an issued time 11914, whfoh indicates the date when 
the ticket transfer message 7412 was issued. These 
data are closed and addressed to tiie user B, thereby 
provkling tiie ticket transfer message 7412. 

25 [1693] The transfer information 1 1910 is information 
concerning the electronic ticket transfer process per- 
formed by the servrce provkling system, and is accom- 
panied by tiie digital signature of the service provider. 
[1 694] The nfK)bile user terminal of user B decrypts tiie 

30 received ticket transfer message 7412 and examines 
the digital signature, registers tiie electi^onic ticket 
1 1912 in the ticket list 1 712. and displays the electronic 
ticket on the LCD (display the electronic ticket; 7413). 
The ticket transfer process is thereafter terminated. 

35 [1695] An explanation will now be given for the con- 
tents of messages tiiat are exchanged by the devices 
during tiie ticket installation processing. 
[1696] In Rg. 77 are shown procedures for tiie 
exchange of messages by the devices during the ticket 

40 instaliatfon processing, and in Figs. 123A and 123B. 
and 124 A and 124B are shown the contents of mes- 
sages that are exchanged during the ticket installation 
processing. 

[1697] First, when the user performs an electronic 
45 ticket Installation operation 7700. the mobile user termi- 
nal generates an electronic ticket installation request 
7701, and transmits it to tiie service providing system 
1 10 via digital wireless telephone communication. 
[1698] As is shown in Fig. 123 A. the digital signature 
50 of tiie user is provkied for the data that consists of an 
electronic tk:ket installation request header 12300. 
whk;h is header information indicating tiiat the message 
is the electronic ticket installation request 7701 and 
describes tiie data structure; an installation card 
55 number 1 2301 and an installation number 1 2302. which 
are entered by a user; a request number 12303. which 
is an art)it^arily generated number that unk^uely repre- 
sents the electronic ticket installation process; a user ID 
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12304; and an issued time 12305, which indicates the 
date when the electronic ticket installation request 7701 
was issued. These data are dosed and addressed to 
the service provider, thereby providing the electronic 
ticket installation request 7701 . ^ - 

[1 699] Upon receiving the electronic ticket installation 
request 7701 . the user processor of the service provid- 
ing system 110 decrypts it and examines the digital sig- 
nature, and transmits it to the service manager 
processor. The service manager processor generates a io 
service director processor to form a process group for 
processing the electronic ticket installation request 
12306. 

[1700] First, the service director processor refers to 
the installation card list that is indicated by the installa- is 
tion card list address 5229 for the tk:ket issuer list 5203, 
and specifies a ticket issuer v/ho issues a ticket that is 
represented by the installation number 12301. The 
sen^ice director processor generates a ticket installation 
request 1231 7. which is a message requesting that the so 
ticket issuer issue a ticket using the installation card. 
The ticket issuer processor closes the request 12317 
and addresses it to the ticket issuer, and transmits it as 
a ticket installation request 7702 to the ticket issuing 
system 107. 2s 
[1701] As is shown in Fig. 123B, the digital signature 
of the service provkJer is provided for the data that con- 
sist of a ticket installation request header 12310, which 
is header informatk>n indicating tfiat the message is the 
ticket installation request 7702 and deserving the data so 
structure; an installation card number 1231 1 ; an instal- 
lation number 12312; a request r%jmber 12313; a cus- 
tomer nuniser 12314, which uniquely represents a user 
for the ticket issuer; a service provider ID 12315; and an 
issued time 12316. which indcates the date when the 35 
ticket installation request 7702 was issued. These data 
are dosed and addressed to the ticket issuer, thereby 
providing the ticket installation request 7702. 
[1702] Upon receiving the ticket installation request 
7702, the ticket issuing system 107 decrypts it and 40 
examines the digital signature. The ticket issuing server 
1 100 compares the installation card number 1231 1 and 
the installation numt)er 12312, which are included in tiie 
ticket installation request 7702, with the management 
information for the issued electronic ticket Installation 4S 
card that is stored in the ticket issuing information 
sender 1102. The ticket issuing server 1100 then 
updates tiie data In the customer information server 
1102 and the ticket issuing information server 1103. 
FurthernrK)re, the ticket issuing server generates ticket so 
data (12406) for a requested ticket, and transmits, to the 
service providing system, an electronic ticket installa- 
tion convnission 7703, which is a message requesting 
the installation of an electronic tick^ tiiat corresponds 
to the requested ticket. ss 
[1703] As is shown in Fig. 124A, tiie digital signature 
of the ticket issuer is provided for the data tiiat consists 
of an electronic ticket installation commission header 


12400. which is header information indicating tiiat tiie 
message is tiie electronic ticket installation commission 
7703 and describing tiie data structure; a transaction 
number 1 2401 . which is an arbitrarily generated number 
that uniquely represerrts the. transaction with a user; 
ticket issuing information 12402; a request number 
12403; ticket code 12404, which indicates tiie type of 
elecbonlc ticket that is to be issued; a template code 
12405. which indicates a tenplate program for an elec- 
ti-onic ticket to t>e issued; ticket data 12406; representa- 
tive component information 12407; a ticket issuer ID 
12408; and an issued time 12409, which indicates tiie 
date when tiie electi-onic ticket installation commission 
7703 was issued. These data are dosed and addressed 
to the service provider, theret>y providing the electronic 
ticket installation commission 7703. 
[1 704] The ticket issuing information 1 2402 is informa- 
tion concerning the ticket issuing process performed 
tiie ticket issuing system, and is accompanied by tiie 
digital signatijre of the ticket issuer. 
[1705] The ticket data 12406 is ticket information 
issued by the ticket issuer, wherein the digital signature 
of the ticket Issuer accompanies the data that consists 
of the ticket ID 12414. the ticket information 12415 and 
the ticket ID 12416. 

[1 706] The ticket issuer processor of the service pro- 
vkiing system decrypts the received electronic ticket 
installation commission 7703 and examines the digital 
signature, and transmits the commission 7703 to tiie 
service director processor. In accordance wrtii the elec- 
tronic ticket installation commission 12410, the service 
director processor generates an etectronic ticket to be 
issued to a user, using the same procedures as are 
used for the ticket purchase processing, and also gener- 
ates an electit»iic ticket installation message 12415, 
which is a message directing that the electronic ticket 
be installed in the md^ile user terminal. The user proc- 
essor doses the electronic ticket installation message 
12455 and addressees it to a user, and transmits it as 
an electronic ticket installation message 7704 to tiie 
mobile user terminal via digital wireless telephone com- 
munication. 

[1707] As is shown in Fig. 124B. the digital signature 
of the service provider is provided for the data tiiat con- 
sists of an electronic ticket installation header 12417, 
which is header information indicating tiiat the message 
is the electronic ticket installation message 7704 and 
describing the data structure; a transaction nunrt)er 
12418; ticket issuing information 12419. which con- 
cerns the ticket issuing process performed by tiie ticket 
issuing system; ticket issuing information 12420, which 
ooncems the ticket issuing process performed by tiie 
service providing system; a request number 12421; 
generated elecb^onic ticket code 12422; a service pro- 
vider ID 12423; and an issued time 12424, which indi- 
cates the date when the electronic tidcet installation 
message 7704 was issued. These data are dosed and 
addressed to tiie user, thereby providing the electronic 
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ticket instatlation message 7704. The ticket issuing 
information 12419 and the ticket issuing infomiation 
12420 are accompanied by the digital signatures of the 
ticket issuer and the service provider. 
[1 708] The mobile user terminal deaypts.the received s 
electronic ticket installation nnessage 7704 and exam- 
ines the digital signature, registers, in the ticket list 
1712. the electronic ticket included in the electronic 
ticket installation request 7704. and displays the 
installed electronic ticket on the LCD (display the elec- io 
tronic ticket; 7705). 

[1709] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the ticket modification processing. 
[1710] In Fig. 80 are shown procedures for the is 
exchange of messages by the gate ternninal 101. the 
service providing system 1 10 and the ticket issuing sys- 
tem 107 during the processing performed to modify the 
ticket examinatnn program of the gate terminal. In Figs. 
129A and Figs. 88C. 88D and 88F are shown the con- 20 
tents of messages that are exchanged by the gate ter- 
minal 101. the service providing system 110 and the 
ticket issuing system 107 during the ticket nxxfification 
processing. In Fig. 81 are shown procedures for the 
exchange of messages by the mobile user terminal 1 00. 2s 
the service providing system 110 arxi the tktot issuing 
system 107 during the processing performed to modify 
the electronic ticket of the nfKsbile user terminal. In Figs. 
129 A and 129B. and Figs. 130 A and 130B are shown 
the contents of messages that are exchanged by the 30 
nrwbile user terminal 100. the service providing system 
1 10 and the ticket issuing system 107. 
[1711] When the conterrts of a ticket that was issued 
must be altered because an event was changed or an 
error was found when the ticket was issued, the ticket 35 
issuing system generates a modification request 8000 
or 8100, which is a message requesting the nxxifica- 
tkm of a ticket that was issued, and transmits it to the 
service provkJing system. 

[1712] As is shown in Fig. ^29K the digital signature 40 
of the ticket issuer is provkled for the data that consist of 
a modification request header 12900, which is header 
information indicating that the message is the modifica- 
tion request 8000 or 81 00 and desaibing the data struc- 
ture; a modification number 12901. which is an 45 
artxtrarily generated number that unic^ely represents 
the ticket modification processing; a nKXiification code 
12902; a modification time limit 12903. which indicates 
the tinfie limit for tiie modification; a modifk:ation mes- 
sage 12904; a ticket code 12905. which indicates the so 
type of electronic ticket that is to be nruKlif ied; a template 
code 12906. which kJentifies a template program for a 
modified electronic ticket: a ticket count 12907 that indi- 
cates the number of eiectronic tickets to be modified; 
fTKxjrfied ticket data 12908; modified representative ss 
component information 12909; a ticket issuer ID 12910; 
and an issued time 12911. which indicates the date 
when the ticket modification request 8000 was issued. 


These data are dosed and addressed to the service 
provider, tiiereby provkJing the ticket modification 
request 8000 or 8100. 

[1 71 3] The modification code 1 2902 is code informa- 
tion that identifies the type of ticket nrodification 
processing, and that indicates the nrKxjification of the 
electronic ticket information 1917. the modification of 
the representative component information 1932, the 
nfKXlification of the template program, or the nxxJifica- 
tion accompanied by the ticket refund processing will be 
performed. 

[1714] The m6difk:ation message 12904 specifies tiie 
contents of the modification, and is acoonpanied by the 
digital signature of the ticket issuer. 
[1715] The ticket data 12908 is modified ticket infor- 
mation for an electronic ticket to be modified. Tickets in 
a number equivalent to the ticket count 12907 are set as 
ticket data 12908. The ticket information is obtained by 
provkiing the digital signature of tiie ticket issuer for tiie 
data that consists of the ticket ID 12916. the ticket infor- 
mation 12917 and the ticket issuer ID 12918. When no 
modif KBtion of tiie electronic ticket inforntatfon is to take 
place, the ticket data 12908 are not set. 
[1716] The representative component information 
10209 is set as the modified representative component 
information 1932 for an electronic tk^ket that is to be 
nfK)dified. When no modification is scheduled for the 
representative component information 1932. the repre- 
sentative conrponent information 10209 is not set. 
[1 71 7] The ticket issuer processor of the service pro- 
viding system 110 decrypts tiie received modification 
request 8000 or 8100 and examines the digital signa- 
ture, and transmits the request to the service manager 
processor. The service manager processor generates a 
service director processor to form a process group for 
processing tiie modification request 12912. Then, the 
service director processor changes the electronic ticket 
of tiie mobile user terminal and tiie ticket examination 
program of the gate terminal in accordance witti the 
ntodifkation request 12912. The ticket examination pro- 
gram for the gate terminal is changed when the tem- 
plate program is modified. 

[1718] An explanation will now be given for the 
processing performed to change the ticket examination 
program for tiie gate terminal. 
[1719] First, the sen^ice director processor generates 
a new ticket examination program by employing tiie 
ticket examination module, which is pointed to at the 
ticket examination module address 4922 in the elec- 
tronic ticket tenplate list 4905 indicated by the template 
code 12906. and the ticket public key 5309 and the gate 
private key 5310, which are registered in tiie electronic 
ticket management informatfon 5300. Then, the service 
director processor refers to the examination ticket list 
471 1 for the gate terminal of the merchant wfx) is regis- 
tered in tiie merchant list 5302 to obtain tiie electronic 
ticket that is to be modified, and specifies that the gate 
terminal for which the electronic ticket to be modified is 
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registered is an electronic ticket that th&gate terminal is 
to examine. The service director processor transmits, to 
the mercham processor of the gate terminal that is 
spedf ied, a message requesting the performance of the 
forcible data updating process to- update tha ticket 
examination program. 

[1 720] The merchant processor of the specified gate 
temiinal performs the forcitsle data updatng process, 
and modifies the ticket examination program of the gate 
terminal. At this time, the procedures for the exchange 
of messages by the gate tenminal and the service pro- 
viding system, and the cements (data structures) erf the 
messages that are exchanged are the same as those 
employed for the forcible data updating processing that 
was previously described. 

[1721] The mercfiant processor inserts the new ticket 
examination program into the compressed update data 
8828 of the update data 5708, and transmits the result- 
ant data to the gate terminal as the update data 5708. 
[1 722] Upon receiving the update data 5708. the gate 
terminal decompresses the update data 8828, and 
updates the data in the RAM and on the hard d sk. At 
this time, the ticket examination program is also regis- 
tered in the ticket list 2409 of the gate terminal. 
[1723] An e)^lanation will now be given for the 
processing tor modifying an electronic ticket in the 
mobile user terminal. First, the service director proces- 
sor refers to the user list 5301 for an electronic ticket to 
be mocfified, and specifies a user who owns the elec- 
tronic tcket that is to be modified. The service director 
processor generates a nrxxjification notification 12928, 
which is a message for notifying the specified user of 
the modification of the electronic tcket. The user proc- 
essa for the specified user doses the modification noti- 
fication 12928, addresses it to the user, and transmits it 
as a nrKxjification notification 8101 to the mobile user 
terminal via digital wireless telephone communication. 
[1724] As is shown in Fig. 129B, the digital signature 
of the service provkjer is provided for the data that con- 
sist of a modification notifkation header 12920. which is 
header informatk)n irxlicating that the message is the 
modification notice 8101 and desaibing the data struc- 
ture; a modrficatkxi number 12921 ; a modfication code 
12922; a ticket ID 12923; a modification message 
1 2924; a reply time limit 1 2925, which specifies the time 
limit tor the transmission of a replay (reactton selection 
8104) by the user to the modification notk:e 8101; a 
sen^ice provkler ID 12926; and an issued time 12927. 
which indicates the date on whk;h the modification 
notice 8101 was issued. TTiese data are dosed and 
addressed to the user, thereby providing the modrf k:a- 
tion notice 8101. 

[1725] Upon receiving the modifkation notice 8101, 
the mobile user terminal decrypts it and examines the 
digital signature, outputs a call arrival tone to notify the 
user of the reception of the nradificatton notice 8101, 
and displays a modifk:ation message 12924 on the LCD 
(display the modificatton notice; 8102). For example. 


when the date has been changed, a message to that 
effect and a message requesting that the user select an 
action, either "accept," "refuse" or "refund," in response 
to the modification are displayed. 

5' (1726] When, in response to the nnessage displayed 
on the LCD, the user employs the numt>er key switches 
to select an action in response to the modification (reac- 
tion selection operation 8103). the mobile user terminal 
generates a reaction selection message 8104, which 

10 contains the response of the user to the modification 
notrce 8101, and transmits it to the service providing 
system via the digital wireless telephone communica- 
tion. When the user selects "refuse" or "refmd." the 
mot}ile user terminal changes the ticket status 1907 of 

75 the electronic ticket to the use disabled state. 

[1727] As is shown in Fig. 130B, the digital signature 
of the user is provided for thie data that consists of a 
reactk>n selection header 13000, which is header infor- 
mation indkating that the message is the reaction 

20 selection message 81 04 and descrbing the data struc- 
ture; a modifk:ation number 13001; a reaction code 
13002. which klentrfies the type of reaction to the modi- 
fk:atk>n that the user selected; a ticket ID 13004, whk:h 
is a number that is arbitrarily generated, by the nrK>bile 

25 user terminal , that uniquely represents the ticket nxxiif i- 
catk>n; a user ID 13005; and an issued time 13006. 
which indicates the date on which the selectkxi mes- 
sage 8104 was issued. These data are dosed and 
addressed to the service provider, thereby providing the 

30 reaction selection message 81 04. 

[1728] The user processor of the servk:e providing 
system decrypts the received reactbn selection mes- 
sage 8104. examines the digital signature, and trans- 
mits it to the service director processor. The service 

35 director processor updates the contents of an electronic 
ticket, or refunds the cost of the tk:ket in accordance 
with the reaction code 13002 contained in the reaction 
selection message 13007. When the user selects 
"refuse,** the service director processor changes to the 

40 use disabled state the ticket status 4647 of tiie corre- 
sponding electronic ticket in the ticket list 4610 for the 
user, whk;h is stored in the user information server 902. 
[1729] When the reaction code 13002 represents 
"accept." in response to the modification request 8100, 

45 the service director processor generates a new elec- 
tronic ticket using the same procedures as those used 
during the ticket purchase processing. In additton, the 
service director processor generates a modification 
instruction 1301 7. which is a message tor instructing the 

so modification of a ticket, and transmits tt to the user proc- 
essor. The user processor changes a corresponding 
electronic ticket in the user ticket list 4610 to an elec- 
tronic ticket that is included in the modifk;ation instruc- 
tion 13017. The user processor ctoses the modification 

55 instructton 13017 and addresses it to the user, and 
transmits it as a modification instruction 8105 to the 
mobile user terminal via digital wireless telephone com- 
munication. 


143 


285 


EP0950 968 A1 


286 


[1730] As is shown in Fig. 130 A, the digital signature 
of the service provider is provided for the data that con- 
sists of a modification reaction header 13011. which is 
header information indicating that the message is the 
modification instruction 8105 and desaibing the data 5 
structure: a modification number 13012; a request 
number 13013; new electronic ticket data 13014; a 
service provider ID 13015; and an issued time 13016, 
which indicates the date on which the modification 
instruction 81 05 was issued. These data are dosed and w 
addressed to the user, thereby providing the modifica- 
tion instruction 8105. 

[1731] Upon receiving the modification instruction 
8105. the mobile user terminal decrypts it and examines 
the digital signature. Then, instead of the old electroric 15 
ticket the mobile user terminal registers in the ticket list 
1712 the new electronic tick^ 13014 that is included in 
the modfficatk)n instructk}n 8105. and displays the new 
electronic tk:ket on the LCD (display the ticket: 8106). 
[1732] An explanation will now be given for the con- 20 
tents of the nnessages that are exchanged by the 
devices during the ticket refund processing. 
[1733] In Rg. 82 are shewn procedures for exchang- 
ing messages when the ticket refund processing is per- 
formed by immecfiate clearing. In Figs. 131A and 131B. 2S 
133A and 133B. and 134A and 134B are shown the 
contents of messages that are exchanged by the 
devices during the ticket refund processing, tn Rg. 83 
are shown procedures for exchanging messages when 
the ticket refund processing is performed by delayed so 
clearing. In Figs. 131 A and 1318, 132Aand 132B, 133A 
and 133B, and 134A and 134B are shown the contents 
of messages that are exchanged by the devices. 
[1734] The ticket refund process is performed when 
the user selects "refund" during in the ticket modification 35 
process (when the reaction code 13002 of the reaction 
selection message 13007 represents "refund"). There- 
fore, the message exchanging p>rocedures up to the 
reaction selection 13007 are transmitted by the user 
processor to the service director processor, and the 40 
contents of those messages are the same as those 
employed fa the ticket modification processing. 
[1735] When the reaction code 13002 indicates 
"refund," the service director processor generates a 
refund request 13107. which is a message requesting 45 
that the ticket issuer refund the cost of the ticket. The 
ticket issuer processor closes the request 13107, 
addressing it to the ticket issuer, and transmits it as a 
refund request 8205 or 8305 to the ticket issuing sys- 
tem, so 
[1736] As is shown in Fig. 131 A, the digital signature 
of the service provider is provided for the data that con- 
sist of a refund request header 13100. which is header 
information irdicating that the message is a refund 
request and descra3tng the data structure; a modifica- 55 
tion number 13101; a ticket ID 13102 for a ticket for 
whk;h the cost is to be refunded; a request nunt)er 
13103: a customer number 13104; a servrce provider ID 


13105; and an issued time 13106. which indicates the 
date on which the refund request was issued. These 
data are dosed and addressed to the ticket issuer, 
thereby providing the refund request 8205 or 8305. 
[1737] - Upon receiving the refund request 8205 or 
8305, the tk:ket issuing server 1 100 of the ticket issuing 
system updates data in the customer information server 
1 101 . the ticket issuing information server 1 102 and the 
ticket information server 1 103, cancels the issued ticket, 
generates a refund commission 8206. which is a mes- 
sage requesting that the servrce providing system per- 
form the refund process for an electronic ticket, and 
transmits the commission 8206 to the service providing 
system. 

[1738] As is shown in Fig. 131 B, the digital signature 
of the ticket issuer is provided for the data that consists 
of a refund commission header 13111, which is header 
information indicating that the message is the refund 
commission and describing the data structure; a trans- 
action number 13112. which is an arbitrarily generated 
number that uniquely represents the ticket refund 
processing: a refund amount 13113; a clearing option 
13114; a ticket ID 13115; a request number 13116; a 
ticket issuer ID 131 17; and an issued time 131 18, which 
indicates the date when the refund commission was 
issued. These data are dosed and addressed to the 
service provkler, thereby providing the refund commis- 
sion 8206 or 8306. 

[1739] The ticket issuer processor of the service pro- 
viding system deaypts the received refund commission 

8206 or 8306 and examines the digital signature, and 
transmits it to the service director processor. When the 
dearing option 13114 in the refund commission 13119 
represents immediate dearing, the service director 
processor performs the refund process using immediate 
dearing. When the clearing option 13114 represents 
delayed dearing, the service director processor per- 
forms the ticket refund process using delayed clearing. 
[1740] An e)q3lanation will now be given for the ticket 
refund process that uses immediate clearing. 

[1741 1 In Fig. 82. upon receiving a refund commission 
13119. the service director processor generates a 
refund clearing request 13222, which is a message 
requesting the performance of the refund clearing proc- 
ess. The transaction processor processor closes the 
request 13222 and addresses it to the transaction proc- 
essor, and transmits it as a refund clearing request 

8207 to the transaction processing system 106. 
[1742] As is shown in Fig. 132B. the digital signature 
of the service provider is provided for the data that con- 
sists of a refund dearing request header 13212. which 
is header information indicating that the message is the 
refund dearing request 8207 and desaibing the data 
structure: a user dearing account 13213; a ticket issuer 
dearing account 13214, which indicates the dearing 
account of the ticket issuer; a refund anxxint 13215; a 
refund option code 13216: a request number 13217. 
which is issued by the mobile user terminal 100; a trans- 
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action number 13218, which is issued by the ticket issu- 
ing system; a validity term 13219, which specifies a 
period during which the refund clearing request 5904 is 
valid; a service provider ID 13220; and an issued time 
13221 . which indicates the date when the refund dear- - 5 
ing request 5904 was issued. These data are closed 
and addressed to the transaction processor, thereby 
providing the refund clearing request 8207. 
[1743] Upon receiving the refund clearing request 
8207, the transaction server 1000 of the transaction 10 
processing system updates data in the subscriber infor- 
mation server 1001, the member store Information 
server 102 and the transaction Inforrrtation server 103, 
performs the refund clearing process, and generates for 
the service providing system a refund clearing comple- is 
tion notification 8208 that is a message indicating that 
the refund clearing has been completed. 
[1744] As is shown in Fig. 133A, the digital signature 
of the transaction processor is provided for the data that 
consists of a refund clearing completion notification 20 
header 13300, which is header infomnation indicating 
that the message is the refund clearing notification 8208 
and describing the data structure; a clearing number 
13301, which is an ariartrarily generated number that 
uniquely represents the clearing process performed by ss 
the transaction processing system 108; a user clearing 
account 13302; a ticket issuer clearing account 13303; 
a refund amount 13304; a refund option code 13305; a 
request number 13306; a transaction nun^r 13307; 
clearing information 1 3308 for a service provider that is 30 
accompanied by the digital signatire of the transaction 
processor; clearing information 13309 for a ticket issuer 
that is aoconpanied by the digital signature of the trans- 
action processor; a transaction processor ID 13311; 
and an issued time 13312, which indicates the date 35 
when the refund clearing completion notification was 
issued. These data are closed and addressed to the 
senrice provider, thereby providing tiie refund clearing 
completion notification 8208. 

[1745] The transaction processor processor of tiie 40 
sen^ice providing system 110 decrypts tiie received 
refund clearing completion notification 8208 and exam- 
ines tiie digital signature, and transmits the refund 
clearing completion notification 13313 to the service 
director processor. TTie service director processor 4S 
employs tiie refund clearing completion notification 
13313 to generate a refund clearing conpletion notifica- 
tion 13329 for tiie ticket issuer TTie ticket issuer proces- 
sor closes tiie notification 13329. addresses it to tiie 
ticket issuer, and transmits it as a refund clearing com- so 
pletion notification 8209 to the ticket issuing system 
107. 

[1746] As is shown in Rg. 133B, the digital signature 
of the service provider is provided for the data tiiat con- 
sist of a refund clearing completion notification header ss 
13317, which is header information indicating that tiie 
message is tiie refund clearing notification 8209 and 
desaibing the data structure; a clearing number 13318; 


a customer number 13319; a ticket issuer ID 13320; a 
refund amount 13321; a clearing option 13322; a 
request number 13323; a transaction number 13324; 
clearing information 13325 fa a ticket issuer that is 
• accompanied by the digital signatured the transaction 
processor; a transaction processor ID 13326; a service 
provider ID 13327; and an issued time 13328, which 
indicates the date when the refund clearing completion 
notification was issued. These data are closed and 
addressed to the ticket issuer, tiiereby providing tiie 
refund clearing completion notification 8209. 
[1747] The ticket issuing system deaypts tiie received 
refund clearing completion notification 8209 and exam- 
ines tiie digital signature, generates a refund receipt 
8210, and transmits it to the service providing system. 
[1748] As is shown in Fig. 134 A. the digital signature 
of tiie ticket issuer is provided for the data tiiat consists 
of a refund receipt header 13400. which is header infor- 
mation indicating that tiie message is the refund receipt 
8210 and describing the data stiucture; a customer 
number 13201; refund information 13402; a refund 
amount 13403; a request number 13404; a transaction 
number 13405; a clearing number 13406;a transaction 
processor ID 13407; a ticket issuer ID 13408; and an 
issued time 13409. which indicates tiie date when the 
refund receipt 8210 was issued. Ttiese data are dosed 
and addressed to the service provider, thereby provid- 
ing tiie refund receipt 8210. The refund information 
13402 concerns tiie refund process performed by tiie 
ticket issuing system, and is accompanied by tiie digital 
signature of the ticket issuer. 

[1 749] The ticket issuer processor of the service pro- 
viding system 1 10 decrypts the received refond receipt 
8210 and examines the digital signature, and transmits 
ttie refund receipt 13410 to the service director proces- 
sor The service director processor employs the refund 
receipt 13410 to generate a refund receipt 13421 to be 
transmitted to tiie user. 

[1 750] When tiie semce director processor has tiBns- 
mitted the refund clearing completion notification 13329 
to the ticket issuing system, tiie service director proces- 
sor erases from the user ticket list 4610 stored in tiie 
user information server 902 the electronic ticket for 
which tiie refund was effected. 
[1751] The user processor closes tiie refund receipt 
13421, addressing it to ttie user, and transmits it as a 
refund receipt 821 1 to the mobile user terminal 100 via 
digital wireless telephone communication. 
[1752] As is shown in Fig. 134B. tiie digital signature 
of the service provider is provided for the data tiiat con- 
sists of a refund receipt header 13414, which is header 
information indicating that the message is ttie refund 
receipt 8211 and describing the data stiucture; a user 
ID 13415; a decrypted refond receipt 13416 (13410); 
clearing information 13417 for a user that is accompa- 
nied by tiie digital signature of the transaction proces- 
sor; refond information 13418; a service provkier ID 
13419; and an issued time 13420. which indicates the 
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date when the refund receipt 8211 was issued. These 
data are closed and addressed to the user, thereby pro- 
viding the refund receipt 8211. The refund infornnation 
13418 concerns the electronic ticket refund process 
-performed by the service providing system, and j& 
accompanied by the digrtal signature of the service pro- 
vider. 

[1 753] The mobile user terminal deaypts the received 
refund receipt 821 1 and examines the digital signature, 
erases from the check list 1 712 the electronic ticket for 
which the refund was effected, registers the refund 
receipt 13421 in the use list 1715. and displays the 
refund receipt 13421 on the LCD 303 (display the 
refund receipt; 8212). 

[1754] An explanation will now be given for the ticket 
refund processing performed with the delayed clearing. 
In Fig. 83. the procedures up to the time the ticket issu- 
ing system transmits a refund commission to the serv- 
ice providing system are the same as are those for the 
immediate dearing. 

[1755] When the delayed clearing is designated in 
accordance with the clearing optfon 13114. the service 
director processor generates a temporary refund receipt 
13208 that corresponds to a temporary receipt for the 
refurKl process. The user processor closes the tempo- 
rary refund receipt 13208. addressing it to the user, and 
transmits it as a temporary refund receipt 8307 to the 
mobile user terminal 100 via digital wireless telephone 
communication. 

[1756] As is shown in Fig. 132 A, the digital signature 
of tiie service provider is provided for the data that con- 
sist of a terrporary refund receipt header 13200. which 
is header information irxiicating that the message is the 
temporary refund receipt 8307 and describe the data 
structure: a user ID 13201; refund information 13202; a 
refund amount 13203; a request number 13204; a 
transaction number 13205; a service provider ID 13206; 
and an issued time 13207. which indicates the date 
when the temporary refund receipt 8307 was issued. 
These data are closed and addressed to the user, 
thereby providing the temporary refund receipt 8307. 
The refund information 13202 concerns the electronic 
ticket refund process performed by the service providing 
system, and is accompanied by the digital signature of 
the service provider. 

[1 757] The nDobile user terminal deaypts the received 
temporary refund receipt 8307 and examines the digital 
signature, erases the electronic ticket that is refund from 
the check list 1712. registers the temporary refund 
receipt 1 3208 to the use list 1 71 5, and displays the tem- 
porary refund receipt 13208 on the LCD 303 (display 
the refund receipt; 8308). 

[1758] The service director processa thereafter per- 
forms the refund clearing processing. 
[1759] First, the service director processor generates 
the refund clearing request 13222. which is a message 
requesting the performance of the refund clearing proc- 
ess. The transaction processor processor doses the 


request 13222. addressing it to the transaction proces- 
sor, and transmits it as a refund dearing request 8309 
to the transaction processing system 106. 
[1760] The tansaction processing system 106 
- decrypts the^'eceived refund dearing request 8309 and 
examines the digital signature, and performs the refund 
dearing process. Then, the transaction processing sys- 
tem 106 generates a refund dearing completion notifi- 
cation 8310, and transnolts it to the service providing 
system 110. 

[1761] The transaction processor processor of the 
service providing system 110 decrypts the received 
refund dearing completion notification 8310 and exam- 
ines the digrtal signature, and transmits a refund clear- 
ing completion notification 13313 to the service director 
processor. The service director processor employs the 
refund dearing completion notification 13313 to gener- 
ate the refund clearing completion notification 13329 for 
the ticket issuer. The ticket issuer processa cfoses the 
notification 13329. addressing it to the ticket issuer, and 
transmits it to the ticket issuing system 107 as a refund 
dearing completion notrficatfon 8311 for the ticket 
issuer. 

[1 762] The ticket Issuing system decrypts the received 
refund dearing completion notification 8311 and exam- 
ines the digital signature, and generates a refund 
receipt 8312 and transmits it to the service provkling 
system. 

[1 763] The ticket issuer processor of the service pro- 
viding system 110 decrypts the received refund receipt 
8312 and examines tiie digital signature, and transmits 
a refund receipt 13410 to the service director processor. 
The service director processor enrpfoys the refond 
receipt 13410 to generate a refund receipt 13412 for the 
user. 

[1764] The generated refund receipt 13412 is not 
immediately transmitted to the mobile user terminal 100 
of tiie user but when the mobile user ternr^nal 100 per- 
forms the data updating process, the user processor 
replaces the temporary refund receipt 13208 In the use 
list 1715 with the refund receipt 13421 . and transmits it 
as a part of the update data 831 3 to the mobile user ter- 
minal 100. 

[1765] The data structures of the refund dearing 
request 8309. the refund clearing completion notifica- 
tion 8310. the refund clearing completion notification 
831 1 and the refund receipt 8312 for the delayed dear- 
ing are the same as those used for the refund dearing 
request 8207. the refund clearing completion notifica- 
tion 8208. tiie refund clearing completion notification 
8209 and the refund receipt 8210 for tiie immediate 
dearing. 

[1766] The refund clearing process with the delayed 
dearing is not necessarily performed immediately after 
the temporary refund receipt is issued, and may be per- 
formed, for example, once a day with another dearing 
process. 

[1767] An explanation will now be given for the con- 
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tents of messages that are exchanged by devices in var- 
ious processes for electronic payment card service. 
[17^1 First, an explanation will be given for the con- 
tents of messages that are exchanged by devices dur- 
ing the payment card purchase processing, -5 

[1769] In Fig. 61 are shown the procedures for the 
exchange of messages by devices during the payment 
card purchase processing. In Figs. 96A and 96B, 97A 
and 97B, 98A and 98B, 99A and 99B. and 100 A and 
100B are shown the contents of messages that are io 
exchanged by devices during the payment card pur- 
chase processing. 

[1770] First, when a user performs a paymerrt card 
purchase order operation 6100, the mobile user termi- 
nal transmits a payment catd purchase order 6101 to 75 
the service providing system tfrough digital wireless tel- 
ephone communication. 

[1771] As is shown in Fig. 96A, the digital signature of 
a user is provided for data ihaX consists of a payment 
card purchase order header 9600, which is header 20 
information identifying the message as the payment 
card purchase ader 6101 and describing the data 
structure; a response code 9601. which identifies the 
type of sen/ice requested by the user; a card order code 
9602. which identifies an order code for a payment card ss 
that is entered by the user; a number of payment cards 
9603 that the user has entered; a payment service code 
9604, which identifies a credit card designated by the 
user; a payment value 9605; a payment option code 
9606. which identifies a payment option, such as the 30 
number of payments designated by the user; a request 
nunrt>er 9607. which is an Eirbltrarily generated number 
that uniquely represents the payment card purchase 
processing; a validity term 9608 for the payment card 
purchase order 6101; a user ID 9609; and an issued 35 
time 9610. which is the date on which the payment card 
purchase order 6101 was issued. These data are 
closed and addressed to the sen^ice provider, thereby 
providing the payment card purchase order 6101. The 
service code 8901 identifies the purchase order of a 40 
paynrient card to a payment card issuer who is selected 
by the user. 

[1772] Upon receiving the paymerrt card purchase 
order 6101. the user processor of the service providing 
system 110 decrypts it and examines the digital signa- 4S 
ture, and transmits it to the service manager processor. 
Then, the service manager processor generates a sen/- 
ice director processor to form a process group that proc- 
esses a payment card order 9611 . The sendee director 
processor refers to the payment card issuer list 5204 so 
and generates a payment card purchase order 9626 for 
the payment card issuer indicated by the service code 
9601. The payment card issuer processor doses the 
payment card order and addresses it to the payment 
card issuer, and transrrats the resultant order as a pay- ss 
ment card purchase order 6102 to the payment card 
issuing system 108. 

[1 773} As is shown in Fig. 96B, the digital signature of 


a service providing system is provided for data that con- 
sists of a payment card purchase order header 9615, 
which is header information indicating that the message 
is the payment card purchase order 6102 and describ- 
ing ^e data structure; a card order, code 9616; a 
number of cards 9617 that are purchased; a payment 
service code 9618; a paymerrt value 9619; a payment 
option code 9620; a request numt)er 9621; a customer 
number 9622, which uniquely represents a user for the 
payment card issuer; a validity term 9623 for the pay- 
ment card purchase order 6102; a sen^ioe provider ID 
9624; and an issued time 9625, which is the date on 
which the payment card purchase order 6102 was 
issued. These data are closed and addressed to the 
payment card issuer, thereby providing the payment 
card purchase order 6102. 

[1774] When there was a previous transaction to 
which the user and the payment card issuer were par- 
ties, a custonf)er number that is registered in the cus- 
tomer table of the payment card issuer is established as 
the customer number 9622. When there was no previ- 
ous transaction, the service drector processor gener- 
ates for the payment card issuer a number that uniquely 
represents the user, establishes it as the customer 
nun*>er 9622. and registers that number in the cus- 
tomer table. The customer table is designated by using 
the customer table address 5237 of the payment card 
issuer list 5204. 

[1775] Upon receiving the payment card purchase 
order 6102. the payment card issuing system 108 
decrypts rt and examines the digital signature. The pay- 
ment card issuing sen/er 1200 updates the data in the 
customer information server 1201, the payment card 
issuing information server 1202 and the payment card 
information server 1203, generates payment card data 
(9719) for the orclered payment card, and transmits, to 
the service providing system, an electronic payment 
card issuing commission 6103. which constitutes a 
message requesting the process for issuing an elec- 
tronic payment card that corresponds to the payment 
card and the process for settling the price of the pay- 
ment card. 

[1776] As is shown in Fig. 97A. the digital signature of 
a payment card issuer is provided for data that consists 
of an electronic payment card issuing commission 
header 9700, which is header information identifying the 
message as the electronic payment card issuing com- 
mission 6103 and desaibing the data structure; a trans- 
action number 9701, which is an arbitrarily generated 
number that uniquely identifies a transaction to which a 
user is a party; a sales value 9702. which conveys the 
price of a payment card; a clearing option 9703, which 
indicates which clearing procedures apply; a request 
number 9704; a payment card code 9705. which identi- 
fies the type of electronic payment card that is to be 
issued; a template code 9706, wfiich identifies a tem- 
plate program to be used for an electronic payment card 
that is to be issued: a number of payment cards 9707, 
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which indicates how many paynnent cards are to be 
issued; payment card data 9708; representative compo- 
nent information 9709; a payment card issuer ID 9710; 
and an issued time 9711 , which is the date on which the 
electronic payment card issuing conrYmission 6103 was 
issued. These data are closed and addressed to the 
service provider, thereby providing the electronic pay- 
ment card issuing commission 6103. 
[1777] The clearing option 9703 is infamation by 
which the payment card issuing system designates, to 
the service providing system, the procedures to be used 
for clearing the price of a payment card. The clearing 
process ts roughly divided into a spontaneous dearing 
process for issuing an electronic payment card to a user 
after the price of the paymerri card has been cleared, 
and a delayed clearing process for clearing the price of 
a payment card after an electronic payment card has 
been issued. The clearing option 9703 is used to desig- 
nate either clearing process. 
[1 778] In the delayed clearing process, since an elec- 
tronic payment card is issued to a user before the clear- 
ing process is performed, the user does not have to 
wait 

[1779] For example, based on a purchase history 
maintained for customers, the paymerrt card issuer can 
designate the delayed clearing process for a customer 
with whom it has had dealings and who is known to be 
trustworthy, and can designate the spontaneous clear- 
ing for a customer with whom rt has had no previous 
dealings. 

[1780] The payment card data 9708 is payment card 
information issued by the payment card issuer. A 
number of payment card irrfbrmation items equivalent to 
the number of payment cards 9707 are established as 
the payment card data 9708. For one payment card, the 
digital signature of a payment card issuer is provided for 
data that consist of a card ID 9716. card infonmation 
9717 and a payment card issuer ID 9718. and the pay- 
ment card information is thereby provided. The payment 
card information 9717 is ASCII infonnatton describing 
the contents of a payment card. For the payment card 
infonnation 9717. the title of a payment card, the tace 
value of the payment card that is issued, the usage con- 
dition, an issuer, and whether it can be transferred, are 
described using a form whereby tag information repre- 
senting Infonmation types is additionally provided. 
[1781] The representative corrponent information 
9709 is infomriation that is established as the represent- 
ative component information 2032 for an electronic pay- 
ment card to be generated. Therefore, the 
representative component information 9709 may not be 
set for use. 

[1 782] The payment card issuer processor of the sen^- 
ice providing system receives the electronic payment 
card issuing comnrvssion 6103. decrypts it and exam- 
ines the digital signature, and transmits it to the service 
director processor. The service director processor per- 
forms the electronic payment card issuing process and 


"the payment card price clearing process in accordance 
with the clearing procedures designated by using the 
clearing option 9703. 

[1783] In Fig. 61 is shown the spontaneous clearing 
s - -process. The delayed clearing process wiH t>e descrfoed 
later. 

[1784] For the spontaneous clearing, the service 
director processor generates a dearing request 9824. 
which is a message requesting the dearing of the price 
10 of a payment card. The transaction processor processor 
doses the clearing request 9824 and addresses it to the 
transaction processor, and then transmits rt as a clear- 
ing request 6104 to the transaction processing system 
106. 

15 [1 785] As is shown in Fig . 98B, the digital signature of 
a service provider is provided for data that consists of a 
dearing request header 9814. which is header infonna- 
tion indicating that the message is the dearing request 
6104 and describing the data structure: a user dearing 

20 account 9815, which includes a credit card ttiat corre- 
sponds to the payment service code designated by the 
user: a payment card issuer dearing account 9816, 
which designates the dearing account of a payment 
card issuer; a payment value 9817; a payment option 

25 code 9818; a request number 9819. which is issued by 
the mettle user terminal 100; a transaction number 
9820. which is issued by the payment card issuing sys- 
tem; a validity term 9821, which presents the period 
during which the clearing request 6104 is effective; a 

30 service provider ID 9822; and an issued time 9823. 
which indicates the date on which the dearing request 
6104 was issued. These data are dosed and addressed 
to the transaction processor, thereby providing the 
dearing request 6104. 

35 [1786] The transaction processing system 106 
receives the dearing request 6104. decrypts it and 
examines the digital signature, and performs the clear- 
ing process. Then, the transaction processing system 
106 generates a clearing completion notification 6105. 

40 and transmits it to the service providing system 110. 
[1787] As is shown in Fig. 99A. the digital signature of 
a transaction processor is provided for data that consist 
of a clearing conpletion notification header 9900. which 
is header information indicating that the message is the 

45 dearing completion notification 6105 and deserving the 
data structure; a clearing number 9901. which is an 
arbitrarily generated number that uniquely represents 
the dearing process performed by the transaction 
processing system 106; a user clearing account 9902; a 

so payment card issuer dearing account 9903; a payment 
value 9904; a payment option code 9905; a request 
number 9906; a transaction number 9907; dearing 
information 9908 for a service provider that is accompa- 
nied by the digital signature of the transaction proces- 

55 sor ; clearing information 9909 for a payment card issuer 
that is acconnpanied by the digital signature of tiie trans- 
action processa; clearing information 9910 for a user 
that is accompanied by the digital signature of tiie trans- 
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action processor; a transaction processor provider ID 
991 1 ; and an Issued time 991 2. which indicates the date 
on which the clearing completion rx)tification was 
issued. These data are closed and addressed to the 
service provider, thereby providing the clearing comple- 
tion notification 6105. 

[1788] Upon receiving the clearing completion notifi- 
cation 6105, the transaction processor processor of the 
service providing system 110 decrypts it and exarrvnes 
the digital signature, and transmits a clearing comple* 
tion notification 9913 to the service director processor. 
Upon receiving the clearing completion notification 
9913. the service director processor generates a clear- 
ing completion notification 9930 for the payment card 
issuer The payment card issuer processor doses the 
clearing completion notification 9930. and transmits it to 
the paymerrt card issuing system 107 as a clearing 
completion notification 6106 for the payment card 
issuer. 

[1 789] As is shown in Fig. 99B, the digital signature of 
a service provider is provided for data that consist of a 
clearing completion notification header 9917, which is 
header information indicating that the message is the 
clearing completion notification 6106 and describing the 
data structure; a clearing number 9918; a customer 
number 9919; a payment card issuer ID 9920; a pay- 
ment service code 9921 ; a payment value 9922; a pay- 
ment option code 9923; a request number 9924; a 
transaction number 9925; clearing information 9926 for 
a payment card issuer that is accompanied by the digital 
signature of the transaction processor; a transaction 
processor ID 9927; a service provider ID 9928; and an 
issued time 9929. which indicates the date on which the 
clearing completion notification was issued. These data 
are closed and addressed to the payment card issuer, 
th^eby providing the clearing completion notification 
6106. 

[1790] Upon receiving the clearing completion notifi- 
cation 6106, the payment card issuing system decrypts 
it and examines the digital signature, and generates a 
receipt 6107 and transmits it to the service providing 
system. 

[1791] As is shown in Fig. 100A. the digital signature 
of a payment card issuer is provided for data that con- 
sists of a receipt header 10000, which is header infor- 
mation indicating that the message is the receipt 6107 
and descrbing the data structure; a customer number 
10001 ; payment card issuing infbmnation 10002; a pay- 
ment service code 10003; a payn^ent value 10004; a 
payment option code 10005; a request number 10006; 
a transaction number 10007; clearing information 
10008; a transaction processor ID 10009; a payment 
card issuer ID 10010; and an issued time 10011, which 
indicates the date on which the receipt 6107 was 
issued. These data are closed and addressed to the 
sen^ice provider, thereby providing the receipt 6107. 
The payment card issuing tnfamation 10002 is informa- 
tion concerning the payment card issuing process per- 


formed by the payment card issuing system, and is 
accompanied by the digital signature of the payment 
card issuer. 

[1792] Upon receiving the receipt 6107. the payment 
5 ■ card issuer processor of the service providing system 
110 deaypts it and examines the digital signature, and 
transmits a receipt 1 001 2 to the service director proces- 
sor. The service director processor employs the receipt 
10012 to generate a receipt 10023 for a user. 
10 [1 793] In addition, the service director processor gen- 
erates a clearing completion notification 9930 for the 
payment card issuing system, generates an electronic 
payment card to be issued to the user, and further gen- 
erates an electronic payment card issuing message 
15 9227 that includes the electronic payment card that is 
generated. 

[1794] The user processor closes the electronic pay- 
ment card issuing message 9227 and the receipt 10023 
while addressing them to the user, and transmits them 

20 as an electronic payment card issuing message 6108 
and a receipt 6109 to the mobile user terminal 100 via 
digital wireless communication. 
[1795] As is shown in Fig. 97B, the digital signature of 
a service provider is provided for data that consist of an 

25 electronic paynf)ent card issuing header 9720. which is 
header infamation indicating that the message is the 
electronic payment card issuing message 6108 and 
describing the data structure; a transaction number 
9721 ; a request number 9722; the number of payment 

30 cards 9723; electronic payment card data 9724 that are 
generated; a service provider ID 9725; and an issued 
time 9726, which indicates the date on which the elec- 
tronic payment card issuing message 6108 was issued. 
These data are closed and addressed to the user, 

35 thereby providing the electronic payment card issuing 
message 6108. The electronic payment card data 9724 
includes electronic payment cards 9731 equivalent in 
number to the number of payment cards 9723. 
[1796] As is shown in Fig. 100B. the digital sigr^re 

^ of a service provider is provided for data that consists of 
a receipt header 10016. which is header information 
irxjicating that the message is the receipt 6109 and 
describing the data structure; a user ID 1001 7; a receipt 
10018 (10012) obtained by decryption; clearing infor- 

45 mation 1 001 9 for a user that is accompanied by the dig- 
ital signature of a transaction processor; payment card 
issuing information 10020; a service provider ID 10021; 
and an issued time 10022, which indicates the date on 
which the receipt 6109 was issued. These data are 

50 dosed and addressed to the user, thereby providing the 
receipt 6109. The payment card issuing information 
10020 is informatbn for the electronic payment card 
issuing process performed by the sen/ice providing sys- 
tem, and is accompanied by the digital signature of the 

55 service provider. 

[1797] Upon receiving the electrorvc payment card 
issuing message 6108 and the receipt 6109. the mobile 
user terminal decrypts them and exantines the digital 
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signatures, enters in the payment card list 1 71 3 an elec- 
tronic payment card incfixled in the electronic payment 
card issuing message 6108. enters the receipt 10023 in 
the use list 1715, and displays the electronic paymern 

card on the LCD 303. - 5 

[1798] The generation of an electronic paymerrt card 
by the service director processor is performed as fol- 
lows. 

[1799] Rrst. the service director processor refers to 
the electronic payment card tenplate list 5005 for the io 
payment card issuer that is stored in the payment card 
issuer information server. Then, by using the electronic 
payment card template program that is identified by the 
template code 9706 of the electronic payment card issu- 
ing commission 6103, the service director processor 75 
generates a paymerrt card program for an electronic 
payment card. Specifically, the payment card program 
data 2013 for an electronic paymerrt card are generated 
using the transaction module and the representation 
nrxxJule. which are described as being located at the 20 
transaction module address 5019. and the representa- 
tion module address 5020 in the electronic payment 
card template list 5005, and the representative compo- 
nent information 9709 in the electronic payment card 
issuing commtsGion 6103. When the representative 25 
oorrponent infomnation 9709 is not present In the elec- 
tronic payment card issuing commission 6103, the 
default representative component information located at 
the default representative component irrformation 
address 5021 is employed as the information for an 30 
electronic payment card. 

[1800] Following this and based on the payment card 
information included in the card information 9717, the 
service director processor generates the card status 
2007 and the total remaining value 2008. Whether the 35 
card status 2007 can be transferred is designated, and 
the face value of the payment card that is issued is set 
as the total remaining value 2007. The service director 
processor generates a new pair cortsisting of a card sig- 
nature private key and a card signature public key, and 40 
further generates the payment card program 2001 for 
an electronic payment card by employing the card pri- 
vate key and the accounting machine public key that are 
registered in the electronic payment card management 
information 5400. 45 
[1801] Furthermore, the service director processor 
generates an electronic paymem card by enploying the 
obtained card signature public key to generate the cer- 
tificate 2003 for the electronic payment card, and by 
employing the payment card data 971 9 in ttie electronic so 
payment card issuing commission 6103 to generate the 
presentation card 2002 for the electronic payment card. 
[1802] The procedures for the delayed clearing will 
now be described. 

[1803] In Rg. 62 are shown the procedures for 55 
exchanging messages between the devices in tiie pay- 
merrt card purchase process for the delayed clearing. 
The same process is performed as is used for the spon- 


taneous clearing until the payment card issuing system 
transmits the electronic payment card issuing commis- 
sion to the service providing system. 
[1804] When tiie delayed clearing is designated by the 
clearing option 9703. the sendee director processor 
generates an electronic payment card to be issued to 
the user, and also generates the electronic payment 
card issuing message 9727. which includes the gener- 
ated electronic payment card, and a tenrporary receipt 
message 9810, which corresponds to a temporary 
receipt. The generation of the electix)nic payment card 
is performed in the same manner as that used for tiie 
spontaneous clearing. 

[1805] The user processor closes the electronic pay- 
ment card issuing message 9727 and tiie temporary 
receipt 9810 and addresses them to the user, and trans- 
mits these messages as an electronic payment card 
issuing message 6204 and a temporary receipt 6205 to 
the mobile user terminal 100 via digital wireless tele- 
phone communication. 

[1806] As is shown in Fig. 98A. tiie digital signature of 
a service provider is provided for data that consists of a 
temporary receipt header 9800, which is header infbr- 
n^tion indicating that the message is the temporary 
receipt 6205 and descrbing the data structure; a user 
ID 9801 ; payment card issuing information 9802; a pay- 
ment service code 9803; a payment value 9804; a pay- 
ment option code 9805; a request number 9806; a 
tiansaction number 9807; a service provider ID 9808; 
and an issued time 9809, which indicates tiie date on 
which tiie temporary receipt 6205 was issued. These 
data are closed and addressed to the user, thereby pro- 
viding the temporary receipt 6205. The payment card 
issuing information 9802 Is information concerning the 
electronic payment card issuing process that is per- 
formed by the service providing system, and is accom- 
panied by the digital signature of the service provider. 
[1807] The data structure of the electronic payment 
card issuing message 6204 is the same as that used for 
the electronic payment card issuing message 6108. 
[1808] Upon receiving the electronic payment card 
issuing message 6204 and the tenporary receipt 6205. 
the mobile user terminal decrypts tiiem and examines 
the digital signatjres. enters an electronic payment card 
included in the electronic payment card issuing mes- 
sage 6204 in tiie payment card list 1713. enters tire 
tenrrporary receipt 9810 in tiie use list 1715, and dis- 
plays tiie electronic payment card on the LCD 303. 
[1809] Following tills, the service director processor 
performs the clearing process for the price of tire pay- 
ment card. First, the sen/ice director processor gener- 
ates a clearing request 9824, which is a message 
requesting the performance of the clearing process for 
ttie price of the payment card. The transaction proces- 
sor doses the clearing request 9824 and addresses it to 
the transaction processor, and transmits it as a clearing 
request 6207 to the t-ansaction processing system 106. 
[1810] Upon receiving the clearing request 6207, tiie 
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transaction processing system 106 decrypts it and 
examines the digital signature, and perlbnns the clear- 
ing process. The transaction processing system 106 
generates a clearing completion notrflcatbn 6208 arxi 
transmits it to the service providing system 110. 5 
[1811] Upon receiving the clearing completion notifi- 
cation 6208, the transaction processor processor of the 
service providirtg system 110 decrypts it and examines 
the digital signature, and transmits a clearing comple- 
tion notification 9913 to the service director processor. 10 
The service director processor employs the received 
clearing completion notification 9913 to generate a 
clearing completion notification 9930 for the payment 
card issuer. And the payment card issuer processor 
closes the clearing completion notification 9930 and is 
transmits it to the payment cand issuing system 108 as 
a clearing conpletion notification 6209 for the payment 
card issuer. 

[1 81 2] The payment card issuing system decrypts the 
received clearing completion notification 6209 arxi 20 
examines the digital signature, and generates a receipt 
6210 and transmits it to the service providing system. 
[1813] The payment card issuer processor of the sen^- 
ice providing system deaypts the received receipt 6210 
and examines the digital signature, and transmits a ss 
receipt 10012 to the service director processor. The 
sen^ice director processor employs the receipt 10012 to 
generate a receipt 10023 fa a user. 
[1814] The receipt 10023 that is generated is not 
immediately transmitted to the mobile user terminal 1 00 30 
of the user. When the mot>ile user terminal has per- 
formed the data updating process, the user processor 
replaces the temporary receipt 981 0 in the use list 1 71 5 
with the receipt 10023, and transmits the receipt 10023 
as one part of the update data 621 1 to the motnle user 35 
terminal 100. 

[1815] The data structures of the clearing request 
6207. the clearing completion notification 6208. the 
clearing completion notification 6209 and the receipt 
6210 for the delayed clearing are the same as those 4o 
provided for the clearing request 6104, the clearing 
completion notification 6105. the clearing conpletion 
notification 6106 and the receipt 6107 for the spontane- 
ous clearing. 

[1 81 6] The delayed clearing process need not be per- 45 
formed immediately after the electronic payment card is 
issued, and together with the other clearing processes, 
may be perfonrted. tor example, once a day 
[1817] An explanation wilt now be given tor the con- 
tents of messages that are exchanged by the mobile so 
user terntinal 100 and the service providing system 110 
during the payment card registration processing. 
[1818] In Fig. 65B are shown the procedures tor 
exchanging messages between devices in the payment 
card registration processing, and in Figs. 107A arxj ss 
107B are shown the contents of messages that are 
exchanged by the devices in the payment card registra- 
tion processing. 


[1819] First, when the user performs an electronic 
payment card registration operation 6504, the mobile 
user terminal generates a payment card registration 
request 6505 and transmits it to the service providing 
system via digital wireless telephone communication. 
[1820] As is shown in Fig. 107A, the digital signature 
of a user is provided tor data that consists of a payment 
card registration request header 10700, which is header 
information indicating that the message is the payment 
card registration request 6505 and descrfoing the data 
structure; a card ID 10701 of a payment card to be reg- 
istered; a user ID 10702; and an issued time 10703. 
which indicates the date on which the payment card 
registration request 6505 was issued. These data are 
dosed and addressed to the service provider, thereby 
providing the payment card registration request 6505. 
[1821] The user processor of the service providing 
system decrypts the received payment card registration 
request 6505 and examines the digital signature, and 
transmits the request 6505 to the service manager 
processor. The service manager processor generates a 
service director processor to form a process group that 
processes a payment card registration request 10704. 
The service director processor ascertains that the elec- 
tronic payment card indicated by the card ID 10701 is 
registered in the payment card list 461 1 for the user in 
the user intormation server 902, and registers that elec- 
tronic payment card in the registered card list 5402 tor 
electronic payment cards of the service director infor- 
mation server 901. At this time, the service director 
processor newly generates a card signature private key 
and a card signature public key pair. Further, the service 
director processor generates a registered card certifi- 
cate using the card signature public key, and registers it 
in the registered card list 5402. The service director 
processor then generates a card certificate issuing 
message 10713 using the card signature private key 
and the registered card certificate that has been gener- 
ated. The user processor closes the card certifrcate 
issuing message 10713 and addresses it to the user, 
and transmits it as a payment card certificate issuing 
message 6506 to the mobile user terminal via digital 
wireless telephone communication. 
[1822] As is shown in Fig. 107B. the digital signature 
of a service provider is provided for data that consists of 
a card certificate issuing header 10708. which is header 
intormation indicating that the message is the payment 
card certificate issuing message 6506 and describing 
the data structure; a card digital signature private key 
10709; a registered card certificate 10710; a sen/ice 
provider ID 10711, and an issued time 10712, which 
irxjicates the date on which the payment card certificate 
issuing message 6506 was issued. These data are 
closed and addressed to the user, thereby providing the 
payment card certificate issuing message 6506. 
[1823] The mobile user terminal 100 decrypts the 
received payment card certificate issuing message 
6506 and examines the digital signature, replaces the 
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card signature private key and the card certificate of an 
electronic payment card with the card signature private 
key 10709 and the registered card certificate 10710. 
both of which are included in the payment card certifi- 
cate issuing messag&.6506. changes the registration. 
state in the card status to the post-registration state, 
and displays on the LCD the electronic payment card 
that has been registered (display a payment card that is 
registered; 6507). 

[1824] An explanation will now be given for the con- io 
tents of messages that are exchanged by the service 
providing system 110 and the merchant terminal 102, 
the merchant terminal 103, or the accounting machine 
3555 (automatic vending machine 104) during the pay- 
ment card setup processing. is 
[1825] The payment card setup processing is not per- 
formed in accordance with a special processing 
sequence, but is performed in the data updating proc- 
ess during which the service providing system updates 
the data in the merchant terminal 1 02 (or the merchant 20 
terminal 103 or the accounting machine 3555). 
[1826] Therefore, for the payment card setup process, 
the procedures for the exchange of messages by the 
service providing system and the merchant terminal 
102 (or the merchant terminal 103 or the accounting 2s 
nnachine 3555), and the contents (data structures) of 
the messages to be exchanged are the same as those 
used for the above described data updating processing 
(Rgs. 57 and 88). 

[1827] It should be noted, however, that the payment 30 
card setup process is not performed each time the data 
Ljfxlating process is performed, but when the payment 
card list 4609 for the merchant stored in the merchant 
information server 903 is updated by the service direc- 
tor processor. 35 
[1828] When the payment card list 4609 is updated, 
the merchant processor includes updated data in the 
payment card list 4609 for the compressed ^Ddate data 
8828 in the update data 5705. and transn^ the result- 
ant data as i^xiate data 5705 to the merchant terminal 40 
102 (or the merchant terminal 103 or the accounting 
machine 3555). 

[1 829] Upon receiving the update data 5705, the mer- 
chant temninal 102 (the merchant terminal 103 or the 
accounting machine 3555) decompresses the update 4s 
data 8828. and updates the data in the RAM and on the 
hard disk At this tinw, the payment card list 281 1 (321 1 
or 3608) in the merchant terminal 102 (or the merchant 
terminal 103 or the accounting machine 3555) is 
updated, and an electronic paymerrt card that is han- so 
died by the merchant tenrrtnal 102 (or the merchant ter- 
minal 103 or the accounting machine 3555) is updated. 
[1830] An explanation will now be given for the con- 
tents of messages that are exchanged by between the 
nrKibile ussr terminal 100 and the merchant terminal ss 
102, the merchant terminal 103. or the accounting 
machine 3555 (automatic vending machine 104) during 
the payment card clearing processing. 


[1831] In Fig. 68 are shown procedures for the 
exchange of messages by the mobile user terminal 100 
and the merchant terminal 102 or 103 during the pay- 
ment card clearing processing, and in Fig. 69 are shown 
procedures for the exchange of by the mobile.user ter- 
minal 100 and the accounting machine 3555. in Figs. 
112A and 112B and Figs. 113A and 113B are shown 
the contents of messages that are exchanged by the 
devices during the payment card clearing processing. 
For the payment card clearing processing, the same 
procedures are employed for the exchange of mes- 
sages by the mobile user terminal 100 and the mer- 
chant ternttnal 102, the merchant terminal 103 or the 
accounting machine 3555, and the same contents (data 
structures) are included in the messages to be 
exchanged. 

[1832] Rrst when a user performs a payment offer 
operation 6804 or 6906. the mobile user terminal 
employs a payment card that is to be used for payment 
and an arbitrarily generated test pattern and produces a 
payment offer message 6805 or 6907, wt«ch is a mes- 
sage for offering the merchant the payment of a price. 
The mobile user terminal transmits the message 6805 
or 6907 to the merchant terminal 102 (or the merchant 
terminal 103 or the accounting machine 3555) via infra- 
red communication. 

[1833] As is shown in Fig. 1 12A, the payment offer 
message 6805 or 6907 consists of a payment offer 
header 11200. which is header information indicating 
that the message is the payment offer message 6805 or 
6907 and describes the data structure; a service code 
11201. which identifies the request for payment using 
an electronic payment card; a request number 11202, 
which is an arbitrarily generated numt^er that uniquely 
represents the payment card clearing process; an 
amount of payment 1 1 203 that is entered by the user; a 
presentation card 11203 for presenting an electronic 
payment card to be used for the payment: a card certifi- 
cate 11205; a current card status 11206 for an elec- 
tronic payment card to be used for the payment; a total 
remaining value 1 1207; a card ID 1 1208; an issued time 
11209. which indicates the date on which the payment 
offer message 6805 or 6907 was issued; and an 
accounting machine test pattern 11211, which is an 
art>itrarity generated test pattern. The digital signature is 
provided, using the card signature private key of an 
electronic payment card, for the card status 1 1206. the 
total remaining value 1 1207, the card ID 1 1208 and the 
issued time 11209. The accounting machine test pat- 
tern 1121 1 is encrypted using the accounting machine 
public key. 

[1834] The presentation card 1 1204. the card certifi- 
cate 11205, the card status 1 1206, the total remaining 
value 11207, the card ID 11208 and the issued date 
11209 specify the contents of the electronic payment 
card for the merchant terminal 102 (or the merchant ter- 
minal 103 or the accounting machine 3555). and the 
accounting machine test pattern 1 121 1 is a test pattern 
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for authorizing the mercharrt terminal 102 (or the mer- 
chant terminal 103 or the accounting nrachlne 3555). 
[1835] Upon receiving the payment offer 6805 or 
6907, first, the merchant terminal 102 (or the merchant 
terminal 103 or the accounting nrachine 3555) refers to 
the payment card list 281 1 (321 1 or 3608) and activates 
a payment card clearing module that oonresponds to the 
card code (included in a presentation card) for the elec- 
tronic paymem card that is presented. Then, the mer- 
chant terminal 102 (or the merchant terminat 103 or the 
accounting machine 3555) examines the validity of the 
contents of the payment offer 6805 or 6907. generates 
a payment offer response 6806 or 6908. which is a 
response message for the payment offer, and transmits 
it to the mobile user terminal via infrared communica- 
tion. When the electronic payment card that is pre- 
sented is not registered in the payment card list 281 1 
(3211 or 3608), the payment offer response 6806 or 
6907 is transmitted, which indicates that the pertinent 
electronic payment card is not available. 
[1836] In the verification processing for determining 
the validity of the payment offer message 6805 or 6907. 
first, the merchant temiinal 102 (or the merchant termi- 
nal 103 or the accounting machine 3555) verifies that 
for the sale the amount of payment 1 1203 designated 
by the user Is adequate. The merchant terminal 102 
employs the fact that the card certificate 1 1205 is a reg- 
istered card certificate, and examines the card status 
1 1206 and the total remaining value 1 1207 to determine 
whether the electronic payment card is valid and can t>Q 
used as a payment card for the payment. "Rien, the mer- 
chant terminal 102 examines the presentation card 
1 1204, the digital signature of the service provider that 
is provided for the card certftcate 1 1205. and the valid- 
ity term. Further, the merchant terminal employs the 
card signature public key of the card certificate 1 1 205 to 
examine the digital signature of the electronic payment 
card that is provided for the card status 1 1206. the total 
remaining value 11207, the card ID 11208 and the 
issued time 11209. In this fashion, the validity of the 
payment offer 6805 or 6907 is verified. 
[1837] In the generation of the payment offer response 
6806 or 6908. the merchant terminal 102 (or the mer- 
chant terminal 103 or the accounting machine 3555) 
decrypts the accounting machine test pattern 11211 
using the accounting machine private key. and empkjys 
the card public key to encrypt the card test pattern 
1 121 1 that is art>itrarily generated. 
[1838] As is shown in Rg. 1 12B, the digital signature 
of a merchant is provided for the data that consists of a 
paymem offer response header 1 1213, which is header 
informatton incficattng that the message is the payment 
offer response 6806 or 6908 and descritxng the data 
structure; a transaction numt>er 11214; a response 
message 11215; a request numt}^ 11216; a card ID 
1 1217; an instruction code 1 1218; an amount of sales 
1 1219. which indicates the price that is charged or the 
cost of the service that is calculated by the mercham 


terminal 102 (a the merchant terminal 103 or the 
accounting machine 3555); an accounting machine test 
pattern 11220, which is decrypted; a card test pattern 
1 1221 . which is an arbitrarily generated test pattern; an 

5 accounting machine ID 11223; a merchant ID 11224; 
and an issued time 11225. which indicates the date on 
which the payment offer response 6805 or 6908 was 
issued. In this fashion, the payment offer response 6806 
or 6908 is provided. The card test pattern 11221 is 

10 encrypted using the card public key 

[1839] The transaction number 11214 is a number 
that is artwtrarily generated, by the merchant terminal 
102 (or the merchant terminal 103 or the accounting 
machine 3555). and that uniquely represents the pay- 

15 ment card clearing process. When, as a result of the 
examination of the payment offer 6805 or 6907. the pay- 
ment card clearing process can not be performed (the 
amount of the payment entered by the user is not suffi- 
cient, or when an electronic paymerrt card is one that 

20 can not be handled by the pertinent merchant terminal 
102 {or the merchant terminal 103 or the accounting 
machine 3555)), a value of 0 is set When the payment 
card clearing process can be performed, a value other 
than 0 is set. 

25 [1840] The response message 1 1215 is text informa- 
tion constituting the message transnrtitted by the mer- 
cham to the user. When the merchant terminal 102 (or 
the merchant terminal 103 or the accounting machine 
3555) can not handle an electronic payment card that 

30 has been presented (transaction number = 0), data to 
that effect is included in the response message. The 
response message is prepared optionally, and may not 
be prepared. 

[1841] The instruction code 1 1 218 is command code 

35 information for an electronic payment card, and is used 
when a value equivalent to the amount of sales 1 1219 is 
subtracted from the total remaining value held by the 
electronic payment card. The instruction code is varied 
by combining the electronic payment card transaction 

40 module and the payment card clearing module. 

[1842] When the mobile user terminal receives the 
paynnent offer response 6806 or 6908. first, for verifica- 
tion of to verify the merchant terminal 102 (or the mer- 
chant terminal 103 or the accounting machine 3555). it 

45 compares the accounting machine test pattern 11211 
with the accounting machine test pattern 11220 
included in the payment offer response 6806 or 6908. 
The vndbWQ user terminal ascertains whether the 
amount of sales 1219 is equal to or smaller than the 

so amount of payment 1 1 203 entered by the user, and sub- 
tracts the amount of sales 11219 from the total remain- 
ing value held by the electronic paymem card in 
accordance with the instruction code 1 1218. Then, the 
mottile user terminal decrypte the card test patten using 

55 the card private key, and generates a micro-check mes- 
sage 6807 or 6909. which corresponds to a check that 
has as its face value the amount of the sale. The check 
is transmitted via infrared communication to the mer- 
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chant terminal 102 (or to the merchant terminal 103 or 
the accounting machine 3555). 
[1843] As is shown in Fig. 1 13A. the digital signature 
using the card signature private key and the digital sig- 
nature of a user are provided for the data ihaX consists s 
of a micro-check header 11300, which is header infor- 
matk)n indicating that the message is the miao check 
6807 or 6909 and desaibing the data structure: a 
micro-check issuing number 1 1301 , which indicates the 
order of the payment card clearing process; a card test io 
pattern 11302, which is decrypted; an amount of pay- 
ment 11303, which indicates the obtained value that is 
subtracted from the total remaining value; a card status 
1 1304; a total remaining value 1 1305 available after the 
subtraction; an accounting machine 10 11306; a mer- 75 
chant ID 1 1 307; a request nunter 1 1 308; a transaction 
number 11309; a card code 11310; a card ID 11311; 
and an issued time 11312, which indicates the date on 
which the micro-check 6807 or 6909 was issued. In this 
fashion, the micro-check 6607 or 6909 is provided. 20 
[1844] Upon receiving the micro-check 6807 or 6909. 
first, the merchant terminal 102 (or the nr^erchant termi- 
nal 103 or the accounting machine 3555) authorizes the 
electronic payment card by comparing the card test pat- 
tern 11221 with the card test pattem 11302 that is 25 
Included in the micro-check 6807 or 6909, examines the 
validity of the contents of the micro-check 6807 or 6909, 
and generates a receipt 6808 or 6910 and transmits rt to 
the mobile user terminal via Infrared communication. 
[1 845] In the verrf icatk)n process for the validity of the so 
micro-check 6807 or 6909. the merchant terminal 102 
(or the merchant terminal 103 or the accounting 
machine 3555) determines whether the amount of pay- 
ment 11303 represented by the micro-check 6807 or 
6909 is adequate for the value of the sale. Also, the mer- 35 
chant terminal 102 (or the merchant terminal 103 or the 
accounting machine 3555) determines whether the 
value obtained by subtracting the total remaining value 
1 1305 from the total remaining value 1 1207, which rep- 
resents the paynrrerrt offer, is equal to the amount of pay- 40 
ment 11303 represented by the micro-check. Finally, 
the merchant terminal 102 examines the digital signa- 
ture of the electronic payment card accompanying the 
micro-check 6807 or 6909. 

[1846] As is shown in Fig. 1 13B, the digital signature 45 
of a merchant is provided for the data that consists of a 
receipt header 1 1314, which Is header inlonmation indi- 
cating that the message is the receipt 6808 or 6910 and 
describing the data structure; sales information 11315; 
a card ID 1 1316; a total receipt value 11317, which indi- so 
cates the same value as the amount of payment 1 1303 
represented by the micro-check that is received by the 
merchant; a request numt>er 11318; a transaction 
number 11319; a micro-check issuing number 11320; 
an accounting machine ID 1 1321 ; a merchant ID 1 1322; ss 
and an issued time 1 1323, wfich Indicates the date on 
which the receipt 6808 or 6910 was issued. In this fash- 
ion, the receipt 6808 or 6910 Is provided. 


[1847] The sales infonnation 11315 is text information 
constituting the contents of a transaction acquired dur- 
ing the payment card clearing process, and corre- 
sponds to the specifications for the products that are 
traded or for the service that is provided, or for a state- 
ment of account. 

[1848] Upon receiving the receipt 6808 or 6910, the 
mobile user terminal verifies that the total rece^st value 
1 1317 is equal to the amount of payment 1 1303 of rep- 
resented by the micro-check, and increments the micro- 
check issuing number. The mobile user ternninal then 
registers the receipt 6808 or 6910 as usage information 
in the use list 1715. and displays the recept 6808 or 
6910 on the LCD (display the receipt; 6810 or 691 1). 
[1849] When the merchant terminal 102 (or the mer- 
chant terminal 103 or the accounting machine 3555) 
has transmitted the receipt 6808 or 6910. it registers, in 
the transaction list 2812 (3212 or 3609), the mk:ro- 
check 6807 or 6909 and the receipt 6808 or 6910 as 
history information for the payment card clearing proc- 
ess. 

[1850] The merchant terminal 102 or the merchant 
terminal 103 displays, on the LCD, a message that indi- 
cates the termination of the payment card clearing proc- 
ess (display the clearing compl^ion; 6809), and the 
product is delivered the merchant to the user (deliver 
the product; 681 1). Thereafter, the accounting machine 
3555 (automata vending machine 104) discharges the 
product to the discharge port 703. 
[1851] When the mobile user temvnal receives the 
payment offer, and the amount of payment 11203 
entered by the user is greater than the amount of sales 
11219. the dialogue message for asking the user for the 
value of the payment is displayed on the LCD 303. 
When the user again enters a payment value that is 
greater than the amount of sales 1 1219, a mtcro-check 
having the entered value as the payment value 11303 
may be issued. In this case, a value that corresponds to 
the difference between the amount of payment 11303 
and the amount of sales 1 1219 can be paid as a com- 
mission to the merchant. 

[1852] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the payment card reference processing. 
[1853] In Rg. 72 are shown procedures for the 
exchange of nr>e8sages by the devices during the pay- 
ment card reference processing, and in Figs. 88A to 
88D and Fig. 1 16B are shewn the contents of messages 
that are exchanged during the payment card reference 
processing. The payment card reference processing is 
not p^formed in accordance with a special processing 
sequence, but is performed in the data updating proc- 
ess during which the service providing system ifxJates 
the data in the merchant terminal 102 (or the merchant 
terminal 103 or the accounting machine 3555). 
[1854] Therefore, for the payment card reference 
process, the procedures for the exchange of messages 
by the merchant terminal 102 (or the merchant terminal 
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103 or the accounting machine 3555) and the service 
providing system, and the contents (data structures) of 
the messages to t>e exchanged are the same as those 
employed for the above descrO£>ed data updating 
processing. - - .- 

[1855] Compressed upload data 8818 in the upload 
data 5702 include a micro-check that Is newly regis- 
tered in the transaction list 2510 during the payment 
card clearing process conducted dicing the period 
extending from the previous performance of the data 
updating process to the cun^ent performance of the data 
updating process. 

[1856] During the data updating processing, the mer- 
chant processor transmits, to the senfice manager proc- 
essor, a message requesting the reference process be 
performed for the micro-check that is uploaded from the 
merchant tenrinal 102 (or the merchant terminal 103 or 
the accounting machine 3555). The service manager 
processor generates a service director processor to 
form a process g-oup for exanvning the validity of the 
miao-check. 

[1 857] First, the service director processor determines 
whether the accounting machine ID 1 1306 and the mer- 
chant ID 11307 in the micro-check match the aooount- 
ing machine ID 5215 of the merchant and the merchant 
ID 5214. Then, the service director processor examines 
the registered card list 5402 in the service director infor- 
mation server 901 to verify that the electronic payment 
card for which the micro-check was issued Is registered. 
The service director processor employs the user public 3o 
key 5419 to examine the digital signature of the user 
that accompanies the micro-checK and employs the 
registered card certificate to examine the digital signa- 
ture for the payment card that accompanies the micro- 
check. In addition, the service director processor 35 
employs the micro-check issuing numt>er when examin- 
ing the matching of the amount of payment with the total 
remaining value, and transmits the result of the exami- 
nation to the merchant processor. As a result, the micro- 
check is registered in the micro-check list. 40 
[1858] The merchant processor enters the received 
payment card reference results in the compressed 
update data 8828 in the update data 5705, and trans- 
mits the data 5705 to the merchant terminal 102 (or the 
merchant terminal 1 03) . as 
[1859] When an error occurs in the process fa verify- 
ing the validity of the micro-check, the service cfirector 
processor transnvts a message indicating that an error 
occured in the management system 908. 
[1860] Upon receiving the update data 5705. the mer- so 
chant terminal 102 (or the merchant terminal 103) 
decompresses the update data 6828 and updates the 
data in the RAM and on the hard disk. At this time, the 
payment card reference results are registered in the 
authorization report list 281 3 (32 1 3) of the merchant ter- ss 
minal 102 (the merchant terninat 103). 
[1861 ] If the finn represented by the merchant differs 
from that represented by the payment card issuer, and a 


payment for the mercharrt wtK) handles the payment 
card is made by the payment card issuer, or if the usage 
of the payment card is periodically reported to the pay- 
ment card issuer in accordance with the terms of a con- 
- tract, in accordance with the micro-check that is newly 
registered in the micro-check list, the service director 
processor generates weekly, for example, a usage con- 
dition notification 1 1616, which is a message for notify- 
ing the payment card issuer of the payment card usage 
condition. The payment card issuer processor closes 
the notification 1 1616 and addresses it to the payment 
card issuer, and transmits it as a usage report 7200 to 
the payment card issuing system 108. 
[1862] As is shown in Fig. 1 16B, the digital signature 
of a service provider is provided for the data that con- 
sists of a usage report fieader 1 1610, which is header 
information indicating that the message is the usage 
report 7200 and deserving the data structure: a card ID 
and payment value list 1 1 61 1 of payment cards that are 
errployed; the merchant name 1 1612 and the merchant 
ID 1 1613 of a merchant that handles the payment card: 
a service provider ID 11614: and an issued time 11615. 
which indicates the date on which the usage report 
7200 was issued. These data are closed and addressed 
to the payment card issuer, thereby providing the usage 
report 7200. 

[1863] Upon receiving the usage report 7200. the pay- 
ment card issuing system 108 decrypts rt and examines 
the digital signature, arxl performs such processing as 
making a payment to the merchant. 
[1864] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the payment card transfer processing. 
[1865] In Fig. 75 are shown procedures for the 
exchange of messages by the devices during the pay- 
ment card transfer processing, and in Figs. 120A and 
120B, 121 A and 121B, and 122A and 122B are shown 
the contents of messages that are exchanged during 
the payment card transfer processing. 
[1 866] The payment card transfer process can be per- 
formed when the card status 2007 of the electronic pay- 
ment card indicates the transfer enabled state, which is 
designated by the payment card issuer when issuing a 
payment card. 

[1867] In Fig. 75 is shown a case where user A trans- 
fers an electronic payment card to user B. The proce- 
dures for the exchange of messages by the devices 
belonging to users A and B are the same tor infrared 
communication as they are for digital wireless commi^i- 
cation. The data structures of messages are also the 
same. 

[1868] In Fig. 75. first, when user A performs a pay- 
ment card transfer process 7500, the nrobiie user termi- 
nal of user A transmits a payment card transfer offer 
7501. which is a message offering to transfer an elec- 
tronic payment card, to the mot)ile user terminal of user 
B. When at this time the mot>ile user terminals of user A 
and user B are connected, communication between 
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user A and user B is performed via digital wireless tele- 
phone. When the mobile user terminals are not con- 
nected, infrared communication is employed. 
[1869] As is shewn in Fig. 120A. the digital signature 
of user A is provided for the data consisting of a card s- 
transfer offer header 12000. which is header information 
indicating that the message is the card transfer offer 
7501 and describing the data structure; a transfer offer 
number 12001 , which is an art)itrarily generated nurT4>er 
that uniquely represents the paynrtent card transfer io 
process; a presentation card 12002 and a card certifi- 
cate 12003 for an electronic payment card to be trans- 
ferred; a card status 12004; a total remairring value 
12005; a card ID 12006; an issued time 12007, which 
indicates the date on wvhich the card transfer offer 750 1 is 
was issued; and a user public key certificate 12009. In 
this fashion, the card transfer offer 7501 is provided. 
Tlie digital signature of the electronic payment card is 
presided, using the card signature private key, for the 
caid status 12004. the variable card information 12005. 20 
the card ID 12006 and the issued time 12007. 
[1870] The digital signature of the service provider is 
prcvided for the data that cor^ist of a user public key 
header 12010; the user pU>lic key 12011 of user A; a 
public key certifkate ID 12012, which is ID information 2s 
for the public key certificate; a certificate validity term 
12013; a service provider ID 12014; and a certificate 
issued time 12015. In this fashion, the user public key 
certifk:ate 12009 is provided. 

[1871] Upon receiving the card transfer offer 7501 , the 30 
mobile user terminal of user B examines the presenta- 
tk>n card 12002. the card certified 12003, and the digital 
signature of the service provkier and the validity term of 
the pdtAic key certifcate 12009. Then, the nrxibtte user 
terminal examines the digital signature of the electronic 35 
payment card that is provkied for the card status 1 2004, 
the total remaining value 12005, the card ID 12006 and 
the issued time 12007, and the digital signature of user 
A accompanying the card transfer offer 7501 , and veri- 
fies the contents of the card trarrsfer offer 7501. In 4c 
accordance with the presentation card 12002. the card 
status 12004 and the total renr^ning value 12005, the 
nnobile user terminal then displays, on the LCD, the con- 
tents of the electronic payment card that is to t>e trans- 
ferred (display the transfer offer; 7502). 45 
[1872] When user B performs a transfer offer accept- 
ance operatk)n 7503. the mobile user terminal of user B 
transmits, to the mobile user terminal of user A. a card 
transfer offer response 7504, which is a response mes- 
sage for the card transfer offer 750 1 . so 
[1873] As is shtown in Fig. 120B, the digital signature 
of user B is provided for the data that consist of a card 
transfer offer response header 12016, whk:h is header 
Information irxJicating that the message is the card 
transfer offer response 7504 and describing the data ss 
structure; an acceptance number 1201 7; a transfer offer 
nunrt)er 12018; a card ID 12019; an issued time 12020. 
whkih incOcates the date on which the card transfer offer 


response 7504 was issued; arxJ a user public key certif- 
icate 12021. tn ti^s fashion, the card transfer offer 
response 7504 is provided. 

[1 874] The user put>lic key certificate 1 202 1 is a public 
key certifk:ate for user B. To provide this certificate 
12021. the digital signature of the service provider is 
provkJed for the data that consist of a user put)lic key 
certificate header 12022; a user public key 12023 for 
user B; a put>lic key certificate ID 12024. which is ID 
information for the public key certificate; a certificate 
validity term 12025; a service provkJer ID 12026; and a 
certificate issued time 12027. 

[1875] The acceptance number 12017 is arbitrarily 
generated, by the mobile user terminal of user B, as a 
number that uniquely represents the payment card 
transfer processing. With this number, the mobile user 
terminal of user A is notified as to whether user B has 
accepted the card transfer offer 7501. When user B 
does not accept the card transfer offer 7501 , a value of 
0 Is set as the acceptance number 12017. When user B 
accepts the card transfer offer 7501 . a value other than 
0 is set. 

[1 876] Upon receiving the card transfer offer response 
7504, the mobile user terminal of user A displays, on the 
LCD, the contents of the card transfer offer response 
7504 (display the transfer offer response; 7505). When 
the card transfer offer 7501 is accepted (acceptance 
number 12017 ^ 0). the mobile user terminal of user A 
examines the digrtai signature of the service provider of 
the user pi^ic key certificate 12021 and the valkJity 
term. The mot>ile user terminal generates a card trans- 
fer certificate 7506, which is a message that corre- 
sporxJs to a transfer certificate for an electronic payment 
card to user B. and transmits it to the mobile user termi- 
nal of user B. 

[1877] As is showvn in Fig. 121 A, the digital signature 
of the electronic payment and the digital signature of 
user A are provkied for the data that consist of a card 
transfer certificate header 12100. which is header infor- 
mation indicating that the message is the card transfer 
certificate 7506 £ind describing the data structure; a 
presentation card 12101 for an electronic payment card 
to be transferred; a card status 12102; a total remaining 
value 12103; a transfer offer numt}er 12104; an accept- 
ance number 12105; a public key certificate ID 12106 
for the user public key certificate of user B; a public key 
certificate ID 12107 for the user public key certificate of 
user A; a card ID 12108; and an issued time 12109, 
which indicates the date on which the card transfer cer- 
tificate 7506 was issued. These data are ctosed and 
addressed to user B, thereby provkiing the card transfer 
certificate 7506. 

[1878] Upon receiving the card transfer certificate 
7506, the mobile user terminal of user B decrypts it and 
examines the digital signature of user A and the one 
accompanying the electronk: payment card. Further, the 
tDdbWe user terminal compares the card ID presented 
by the card transfer offer 7501 with the card ID 12108, 
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and compares the public key certificate IDs 12106 arxl 
12107 with the public key certificates of users B artd A 
to verify the contents of the card transfer certificate 
7506. The mobile user terminal then generates a card 
transfer receipt 7507, which is a message-indicating the .5 
electronic payment card has been received, and trans- 
mits the receipt 7507 to the mobile user terminal of user 
A, 

[1879] As is shown in Fig. 121 the digital signature 
of user B is provided for the data that consist of a card to 
transfer receipt header 121 15, which is header informa- 
tion indicating that the message is the card transfer 
receipt "^07 and describing the data structure: a card 
ID 121 16; a transfer offer number 121 1 7; an acceptance 
number 121 18; a public key certrfk^te ID 12119 for the is 
user publk: key certificate of user A; a public key certifi- 
cate ID 12120 for the user publk: key certificate of user 
B; and an issued time 12121, which indicates the date 
on which the card transfer receipt 7507 was issued. 
These data are closed and addressed to user A. 20 
thereby providing the card transfer receipt 7507. 
[1880] Upon receiving the card transfer receipt 7507, 
the mobile user terminal of user A decrypts it. and 
examines the digital signature of user B. Further, the 
mobile user terminal compares the public key certrfkate ss 
IDs 121 19 and 12120 with the public key certificates of 
users B and A to verify the conterrts of the card transfer 
receipt 7507. The mot)ile user terminal then erases the 
transfen-ed electronic payment card from the card list 
1713, and registers the card transfer receipt 12122 in 30 
use history 1715. At this time, addresses in the object 
data area at which the transfer offer number, the code 
informaton indicating the card transfer process, the 
issued time for the card transfer receipt 7507 and the 
card transfer receipt 12122 are stored are assigned to 35 
the request number 1840 in the use list 1 715. the serv- 
ice code 1841 , the use time 1842 and the use informa- 
tion address 1843. 

[1 881 ] The mobile user terminal of user A displays, on 
the LCD, a message indicating the completion of the 40 
transfer process (cfisplay the transfer process; 7506). 
The process at the tnotoWe user terminal of user A 
(sender) is tiiereafter terminated. 
[1882] After transmitting the card transfer receipt 
7507. the mobWe user terminal of user B displays the 4S 
received card transfer certificate 121 1 1 on the LCD. In 
addition, the mobile user terminal displays a dialogue 
message inquiring whether the transfer process witii the 
senfice providing server (process for downloading the 
received electronic payment card from tiie servk;e pro- so 
viding system) shouki be immediately performed (dis- 
play the transfer certificate; 7509). 
[1883] The diak}gue message has two operating 
menus: "transfer process request" and "cancel." When 
"cancer is selected, the transfer process performed ss 
witii the service provkjing server is canceled, and in tiie 
process (data updating process) during which ttie serv- 
ice providing system ipdates the data in the mobile 


user ternrtinal. an electronk: payment card that has been 
transferred is assigned to tiie mobile user terminal. 
[1 884] When user B selects "t^nsfer process request" 
(transfer process request operation; 7510). based on 
tiie card transfer certrfkate 12111 the nrtobile user ter- 
minal generates a card transfer request 751 1. which is 
a message requesting that the transfer process be per- 
formed with the service provkling system, and transmits 
it to ttie service providing system via digital wireless tel- 
ephone communicatbn. 

[1885] As is shown in Fig. 122A, the digital signature 
of user B is provkled for the data that consists of a card 
ti^nsfer request header 12200, which is header infor- 
mation indicating that the message is the card transfer 
request 7511 and describing the data structure: a 
decrypted card transfer certificate 12201 (12111); tiie 
user ID 12202 of user B; and an Issued time 12203, 
which indk;ates the date when the card transfer request 
751 1 was issued. These data are closed and addressed 
to the service provkier. tiiereby provkiing the card trans- 
fer request 7511. 

[1886] Upon receiving the card transfer request 751 1 , 
the user processor of user B of the servk^e provding 
system 110 decrypts it and examines the digital signa- 
ture, and transmits it to the service manager processor. 
The servkse manager processor generates a servk^e 
director processor to form a process group for process- 
ing the card transfer request 12204. 
[1887] The service director processor, first refers to 
tiie user list 5200 and specifies tiie recipient (user B) 
and tiie sender (user A) of tiie transfer process by 
errpioying the public key certificate IDs 12106 and 
12107 in the card transfer certificate 12201 tiiat is 
included in tiie card transfer request 12204. The servk;e 
director processor examines the digital signature of the 
user A and the digital signature acconpanying the elec- 
ta'onic payment card, which are provided for the card 
transfer certifrcate 12201 , and verifies tiie validty of tiie 
card transfer certificate 12201. Folkiwing tiiis. the serv- 
k;e director processor erases the electronic payment 
card to be transferred from tiie card list 461 1 of tiie user 
A that is stored in the user information server 902. Then, 
tiie sen/ice director processor changes tiie card signa- 
ture private key and card signature public key pair and 
the card certificate for a new key pair and a card certifi- 
cate, and also changes tiie card status and the total 
remaining value to the card status 1 2 1 02 and to tiie total 
remaining value 12103 for the card transfer certifk:ate 
12201. The service director processor generates an 
electronk: payment card received from user A, and 
enters it in the card list 461 1 for the user B. 
[1888] When the electronic payment card that is to be 
transfen-ed has already been registered, the servk:e 
director processor updates the registered card list 5402 
holding the electronic payment card. Specifically, tiie 
user ID 5418, the user public key 5419, the registered 
card certificate address 5420, tiie micro-check list 
address 5421 and the famer user information address 
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5422. alt Of which are in the registered card list 5402, 
are updated (to the information for user B). Ttie old 
information (information for user A) Is pointed to at the 
former user information address 5422 as former user 
information 5423.. 

[1889] The service director prooessa generates a 
payment card transfer message 12215, which includes 
an electronic payment card transferred from user A. The 
user processor of user B closes the message 12215 
and addresses it to the user B, and transmits it as a pay- 
ment card trarYsfer message 7512 to the nfK3bile user 
terminal of user B via digital wireless telephone commu- 
nication. 

[1890] As is shown in Fig. 122B, the digital signature 
of the service provider is provided for the data that con- 
sist of a payment card transfer header 12208. which is 
header infomiation Indicating that the message is the 
card transfer 7512 and describing the data structure: a 
transfer number 12209. which is an arbitrarily generated 
number that represents the transfer process in the sen^- 
ice providing system; transfer information 12210; an 
acceptance number 1221 1 ; an electronic payment card 
12212, which is transferred: a service provider ID 
12213; and an Issued time 12214. which Indicates the 
date when the payment card transfer message 7512 
was Issued. These data are closed and addressed to 
the user B, thereby providing the card transfer message 
7512. 

[1891] The transfer information 12210 Is information 
concerning the electronic payment card transfer proc- 
ess performed by the service providing system, and is 
accompanied by the digital signature of the sen/ice pro- 
vider. 

[1892] The vndbi\e user terminal of user B decrypts the 
received payment card transfer message 7512 and 
examines the digital signature, registers the electronic 
payment card 12212 in the card list 1713. and displays 
the ^ectronic payment card on the LCD (display the 
electronic payment card: 7513). The card transfer proc- 
ess Is thereafter tenminated. 

[1893] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the electronic payment card Installation process- 
ing. 

[1894] In Rg. 78 are shown procedures for the 
exchange of messages by the devices during the elec- 
tronic payment card installation processing, and in Figs. 
125A and 125B. and 125 A and 125B are shown the 
contents of messages that are exchanged during the 
electronic payment installation processing. 
[1895] First, when the user performs an electronic 
payment card installation operation 7800. the mobile 
user terminal generates an ^ectronlc payment card 
installation request 7801 . and transmits it to the service 
providing system 110 via digital wir^ess telephone 
communication. 

[1896] As is shown in Fig. 125A. the digital signature 
of the user is provided for the data that consists of an 


electronic payment card installation request header 
12500, which is header infomiation indicating that the 
message is the electronic payment card installation 
request 7801 and desaibes the data stmcture; an 

5 . . installation . card ruimber 12501. and an installation 
number 12502. which are entered by a user; a request 
number 12503. which Is an artxtrariiy generated numt>er 
that uniquely represents the electrorHc payment card 
installation process; a user ID 12504; and an issued 

10 time 12505. which indicates the date when the elec- 
tronic payment card installation request 7801 was 
issued. These data are dosed and addressed to the 
service provider, thereby providing the electronic pay- 
ment card installation request 7801. 

IS [1897] Upon receiving the electronic payment card 
installation request 7601, the user processor of the 
service provicfing system 110 decrypts it and examines 
the digital signature, and transmits it to the service man- 
ager processor. The service manager processor gener- 

20 ates a service director processa to form a process 
group for processing the electronic payment card Instal- 
lation request 12506. 

[1898] First the service director processa refers to 
the Installation card list that is indicated by the instalta- 

25 tion card list address 5236 for the payment card issuer 
list 5204. and specifies a payment card issuer who 
issues a payment card that is represented by the instal- 
lation number 12501. The service director processor 
generates a payment card installation request 12517, 

30 which is a message requesting that the payment card 
issuer issue a payment card using the installation card. 
The payment card issuer processor closes the request 
12517 arxl addresses it to the payment card issuer, and 
transmits it as a payment card installation request 7802 

35 to the payment card issuing system 1 08. 

[1899] As is shown in Fig. 125B. the digital signature 
of the service provider is provided for the data that con- 
sist of a payment card installation request header 
12510. which is header information indicating that the 

40 message is the payment card installation request 7802 
and describing the data structure; an installation card 
nunt)er 1251 1; an installation number 12512; a request 
number 12513; a customer number 12514, which 
uniquely represents a user for the payment card Issuer; 

45 a service provider ID 12515; and an issued time 12516, 
which indicates the date when the payment card instal- 
lation request 7802 was issued. These data are dosed 
and addressed to the payment card issuer, thereby pro- 
viding the payment card installation request 7802. 

50 [1900] Upon receiving the payment card installation 
request 7802. the payment card Issuing system 108 
decrypts it and examines the digital signature. The pay- 
ment card issuing server 1200 compares the installation 
card number 12511 and the installation nuntier 12512. 

55 which are included in the payment card installation 
request 7802. with the management information for the 
issued electronic payment card installation card that Is 
stored in the payment card issuing information server 
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1202. The payment card -issuing server 1200 then 
updates the data in the customer inforniation server 
1202 and the payment card issuing information server 

1203. Furthermore, the payment card issuing server 
generates payment card data.(12606) lor a requested 5 
payment card, and transmits, to the service providing 
system, an electronic payment card installation com- 
mission 7803, which is a message requesting the instal- 
lation of an electronic payment card that corresponds to 
the requested payment card. w 
[1901] As is shown in Fig. 126A, the digital si^ture 

of the payment card issuer is provided for the data that 
consists of an electronic payment card installation com- 
mission header 12600. which is header information indi- 
cating that the message is the electronic payment card is 
installation commission 7803 and describing the data 
structure; a transaction number 12601 , which is an arbi- 
trarily generated number that uniquely represents the 
transaction with a user; payment card issuing informa- 
tion 12602; a request number 12603; card code 12604, 20 
which indicates the type of electronic payment card that 
is to be issued; a template code 12605. which indicates 
a template program for an electronic pe^ment card to be 
issued; paymerrt card data 12606; representative com- 
ponent information 12607; a payment card issuer ID ss 
12608; and an issued time 12609, which indicates the 
date when the electronic payment card installation com- 
mission 7803 was issued. These data are closed and 
addressed to the service provider, thereby providing the 
electronic payment card installation comrrtission 7803. 30 
[1902] The paymem card issuing information 12602 is 
information concerning the payment card issuing proc- 
ess performed by the paymerrt card issuing system, and 
is accompanied by the digital signature of the payment 
card issuer. 35 
[1 903] The payment card data 1 2606 is payment card 
information issued by the payment card issuer, wheran 
the digital signature of the payment card issuer accom- 
panies the data that consists of the card ID 12614, the 
paynDent card information 12615 and the card ID 12616. 40 
[1 904] The payment card issuer processor of the serv- 
ice providing system decrypts the received electronic 
payment card installation commission 7803 and exam- 
ines the digital signature, and transmits the commission 

7803 to the service director processor. In accordance 45 
with the electronic payment card installation commis- 
sion 12610. the service director processor generates an 
electronic payment card to be issued to a user, using 
the same procedures as are used for the payment card 
purchase processing, and also generates an electronic so 
payment card installation message 12615, which is a 
message directing that the electronic payment card be 
installed in the mobile user terminal. The user proces- 
sor closes the electronic payment card installation mes- 
sage 12655 and addressees it to a user, and transmits ss 
it as an electronic payment card installation message 

7804 to the mobile user terminal via cfigital wireless tel- 
ephone communication. 


[1905] As is shown in Fig. 126B, the digital signature 
of the sendee provider is provided tor the data that con- 
sists of an electronic payment card installation header 
12617. which is header information indicating that the 
message is the electronic payment card installation 
message 7804 and desaibing the data structure; a 
transaction number 12618; payment card issuing infor- 
mation 12619, which concerns the payment card issu- 
ing process performed by tiie payment card issuing 
system; payment card issuing information 12620. which 
concerns the payment card issuing process perfonmed 
by the service providing system; a request number 
12621 ; generated electronic payment card data 12622; 
a service provider ID 12623; and an issued time 12624. 
which indicates the date when tiie electronic payment 
card installation message 7804 was issued. These data 
are closed and addressed to the user, thereby providing 
tiie electronic paymem card installation message 7804. 
The payment card issuing information 12619 and the 
payment card issuing information 12620 are accompa- 
nied by the digital signatures of the payment card issuer 
and the service provider. 

[1906] The mobile user tenninal decrypts the received 
electronic payment card installation message 7804 and 
examines the digital signature, registers, in the card list 
1 713, the electronic payment card included in the elec- 
tronic payment card installation request 7804, and dis- 
plays the installed electronic payment card on the LCD 
(display the electronic payment card; 7805). 
[1907] An explanation will now be given for the con- 
tents of messages that are exchanged by devices in var- 
ious processes for electronic telephone card service. 
[1908] Rrst an explanation will be given for the con- 
tents of messages that are exchanged by devices dur- 
ing the telephone card purchase processing. 
[1909] In Fig. 63 are shown the procedures for tfie 
exchange of messages by devices during the telephone 
card purchase processing. In Figs. 101A and 101B, 
102A and 102B, 103A and 103B. 104A and 104B, and 
105A and 105B are shown the contents of messages 
tiiat are exchanged by devices during the telephone 
card purchase processing. 

[1910] First, when a user performs a telephone card 
purchase order operation 6300. the mobile user termi- 
nal transmits a telephone card purchase order 6301 to 
the service providing system through digital wireless tel- 
ephone communication. 

[1911] As is shown in Fig. 101 A, the digital signature 
of a user is provided for data that consists of a tele- 
phone card purchase order header 10100, which is 
header information identifying tiie message as the tele- 
phone card purchase order 6301 and describing the 
data structure; a response code 10101, which identifies 
the type of service requested by the user; a card order 
code 10102, which identifies an order code for a tele- 
phone card that is entered by the user; a numt)er of tel- 
ephone cards 10103 that the user has entered; a 
payment service code 10104, which identifies a credit 
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card designated b/the user; a payment value 10105; a 
payment option code 10106, which identifies a payment 
option, such as the number of paynients designated by 
the user; a request numt)er 10107, which is an arbitrar- 
ily generated number that uniquely represents the'tele*"-^ 
phone card purchase processing; a validity term 10108 
for the telephone card purchase order 6301 ; a user ID 
10109; and an issued time 10110, which is the date on 
which the telephone card purchase order 6301 was 
issued. These data are closed and addressed to the w 
service provider, thereby providing the telephone card 
purchase order 63@01. The sen^ice code 8901 identi- 
fies the purchase order of a telephone card to a tele- 
phone card issuer wtio is selected by the user. 
[1912] Upon receiving the telephone card purchase is 
order 6301 , the user processor of the service providing 
system 110 decrypts it and examines the digital signa- 
ture, and transmits it to the service manager processor. 
Then, the service manager processor generates a serv- 
ice director processor to form a process group that proc- 20 
esses a telephone card order 10111. The service 
director processor refers to the telephone card issuer 
list 5205 and generates a telephone card purchase 
order 10126 for the telephone card issuer indicated by 
the service code 10101. The telephone card issuer 25 
processor closes the telephone card order and 
addresses it to the telephone card issuer, and transmits 
the resultant order as a telephone car6 purchase order 
6302 to the telephone card issuing system 109. 
[1913] As is shown in Fig. 101 B, the digital signature so 
of a service providing system is provided for data that 
consists of a telephone card purchase order header 
10115, which is header information indicating that the 
message is the telephone carcl purchase order 6302 
and describing the data structure; a card order code 35 
10116; a number of cards 10117 tfiat are purchased; a 
payment service code 1 0 1 1 8 ; a payment value 1 0 1 1 9; a 
payment option code 10120; a request number 10121; 
a customer number 10122, which uniquely represents a 
user for the telephone card issuer; a validity term 1 0123 40 
for the telephone card purchase order 6302; a service 
provider ID 10124; and an issued time 10125. which is 
the date on which the telephone card purchase order 
6302 was issued. These data are dosed and addressed 
to the telephone card issuer, thereby providing the tete- 4S 
phone card purchase order 6302. 
[1914] When there was a previous transaction to 
which the user and the telephone card issuer were par- 
ties, a customer number that is registered in the cus- 
tomer table of the telephone card issuer is established so 
as the customer nurrt3er 10122. When there was no 
previous transaction, the service director processor 
generates tor the telephone card issuer a numtter that 
uniquely represents the user, establishes it as the cus- 
tomer number 10122. arvj registers that nurTt3er in the ss 
customer table. The customer table is designated by 
using the customer table address 5244 of the telephone 
card issuer list 5205. 


[1 91 5] Upon receiving the telephone card purchase 
order 6302, the telephone card issuing system 109 
decrypts it and examines the digital signature. The tele- 
phone card issuing server 1300 t4xjates the data in the 
ojstorrw information server 1301, the telephone card 
issuing information server 1302 and the telephone card 
information server 1303. generates telephone card data 
(10219) for the ordered telephone card, and transmits, 
to the service providing system, an electronic telephone 
card issuing commission 6303. which constitutes a 
message requesting the process for issuing an elec- 
tronic telephone card that corresponds to the telephone 
card and the process for settling the price of the tele- 
phone card. 

[1916] As is shown in Fig. 102A, the digital signature 
of a telephone card issuer is provided for data that con- 
sists of an electronic telephone card issuir)g commis- 
sion header 10200. which is header information 
identifying the message as the electronic telephone 
card issuing commission 6303 and describing the data 
structure: a transaction number 10201. which is an arbi- 
trarily generated nuni>er that uniquely identifies a trans- 
action to which a user is a party; a sales value 10202. 
which conveys the price of a telephone card; a clearing 
option 10203. which indicates which clearing proce- 
dures apply; a request nurTt>er 10204; a telephone card 
code 10205. which identifies the type of electronic tele- 
phone card that is to be issued; a template code 10206. 
which identifies a template program to be used for an 
electronic telephone card that is to be issued: a number 
of telephone cards 10207. which indicates how many 
telephone cards are to be issued; telephone card data 
10208; representative component information 10209; a 
telephone card issuer ID 10210; and an issued time 
10211. which is the date on which the electronic tele- 
phone card issuing commission 6303 was issued. 
These data are closed and addressed to the service 
provider, thereby providing the electronic telephone 
card issuing commission 6303. 
[1917] The clearing option 10203 is information by 
which the telephone card issuing system designates, to 
the service providing system, the procedures to be used 
for clearing the price of a telephone card. The clearing 
process is roughly divided into a spontaneous clearing 
process for issuing an electronic telephone card to a 
user after the price of the telephone card has been 
cleared, and a delayed clearing process for clearing the 
price of a telephone card after an electronic telephone 
card has been issued. The clearing option 10203 is 
used to designate either clearing process. 
[1 918] In the delayed clearing process, since an elec- 
tronic telephone card is issued to a user before the 
clearing process is performed, the user does not have 
to wait 

[1919] For example, based on a purchase history 
maintained for customers, the telephone card issuer 
can designate the delayed clearing process for a cus- 
tomer with whom it has had dealings and wtx) is known 
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to be trustworthy, and can designate the spontaneous 
clearing for a customer with whom it has had no previ- 
ous dealings. 

[1920] The telephone card data 10208 Is telephone 
card information issued by the telephone card issuer.- A - 5 
number of telephone card information items equivalent 
to the number of telephone cards 10207 are established 
as the telephone card data 10208. For one telephone 
card, the dicptal signature of a telephone card issuer is 
provided for data that consist of a card ID 10216, card io 
information 10217 and a telephone card issuer ID 
10218, and the telephone card information is thereby 
provided. The telephone card information 10217 is 
ASCII infornwtion describing the contents of a tele- 
phone card. For the telephone card information 10217. is 
the title of a telephone card, the face value of the tele- 
phone card tiiat is issued, the usage condition, an 
issuer, and whether it can be transferred, are described 
using a form whereby tag information representing infor- 
mation types is additionally provided. 20 
[1921] The representative oomponent information 
10209 is information tiiat is established as the repre- 
sentative oomponent infomiation 2132 for an etecb-onic 
telephone card to be generated. Therefore, the repre- 
sentative component information 10209 may not be set 2s 
for use. 

[1922] The telephone card issuer processor of the 
service providing system receives tiie electronic tele- 
phone card issuing commission 6303. decrypts it and 
examines the digital signature, and transmits it to the 30 
service director processor. The service director proces- 
sor performs the electronic telephone card issuing proc- 
ess and tiie telephone card price clearing process in 
accordance with the clearing procedures designated t>y 
using the clearing option 10203. 35 
[1923] In Rg. 63 is shown the spontaneous clearing 
process. The delayed clearing process will be described 
later. 

[1924] For the spontaneous clearing, the service 
director processor generates a clearing request 10324, 40 
which is a n^essage requesting the clearing of the price 
of a telephone card. The transaction processor proces- 
sor closes tiie clearing request 10324 and addresses it 
to tiie transaction processor, and then transn^ts it as a 
clearing request 6304 to the transaction processing sys- 4S 
tem 106. 

[1925] As is shown in Fig. 103B. ttie digital signature 
of a service provider is provided for data tiiat consists of 
a clearing request header 10314, which is header infor- 
mation indicating tiiat the message is the clearing so 
request 6304 and describing the data structure; a user 
clearing account 10315, which includes a credit card 
tiiat corresponds to tiie payment service code desig- 
nated by tiie user; a telephone card issuer clearing 
account 10316. which designates the clearing account 55 
of a telephone card issuer; a payment value 10317; a 
payment option code 10318; a request number 10319, 
which is issued by the mobile user terminal 100; a trans- 


action number 10320. which is issued by the telephone 
card issuing system; a validity term 10321. which 
presents the period during which the clearing request 
6304 is effective; a service provider ID 10322; and an 
issued time 10323. which indicates the date on which 
tiie clearing request 6304 was issued. These data are 
closed and addressed to tiie transaction processor, 
thereby providing the clearing request 6304. 
[1926] The transaction processing system 106 
receives the clearing request 6304, decrypts it and 
examines the digital Signature, and performs the clear- 
ing process. Then, the transaction processing system 
106 generates a clearing conpletion notification 6305. 
and transmits it to the service providing system 1 10. 
[1927] As is shown in Rg. 104A, the digital signature 
of a transaction processor is provided for data that con- 
sist of a clearing completion notification header 10400, 
which is header information indicating that the message 
is tiie clearing completion notification 6305 and describ- 
ing the data structure; a clearing number 10401 , which 
is an arbitrarily generated number that uniquely repre- 
sents tiie clearing process perfonmed by the transaction 
processing system 106; a user clearing account 10402; 
a telephone card issuer clearing account 10403; a pay- 
ment value 10404; a payment option code 10405; a 
request numt>er 10406; a transaction number 10407; 
clearing information 10408 for a service provider tiiat is 
accompanied by the digital signature of the transaction 
processor; clearing information 10409 for a telephone 
card issuer that is accompanied by the digital signature 
of tiie transaction processor; bearing information 10410 
for a user tiiat is accompanied by the digital signature of 
the transaction processor; a transaction processor pro- 
vider ID 10411; and an issued time 10412, which indi- 
cates tiie date on which the clearing completion 
notification was issued. These data are closed and 
addressed to the service provider, theret>y providing the 
clearing conrpletion notification 6305. 
[1928] Upon receiving tiie clearing completion notifi- 
cation 6305. the transaction processor processor of the 
service providing system 1 10 decrypts it and examines 
tiie digital signature, and transmits a clearing comple- 
tion notification 10413 to the service director processor. 
Upon receiving the clearing completion notification 
10413. tiie service director processor generates a 
clearing conpletion notification 10430 for the telephone 
card issuer. The telephone card issuer processor closes 
tiie clearing completion notification 10430. and trans- 
mits it to the telephone card issuing system 109 as a 
clearing completion notification 6306 for tiie telephone 
card issuer. 

[1929] As is shown in Fig. 104B. the digital signature 
of a service provider is provided for data that consist of 
a clearing completion notification header 10417, which 
is header information indicating that the message is tiie 
clearing completion notification 6306 and describing tiie 
data structure; a clearing nunr^r 10418; a customer 
number 10419; a telephone card issuer ID 10420; a 
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payment service code 10421 ; a payment value 10422; a 
payment option code 10423; a request number 10424; 
a transaction number 10425; clearing infomrBtion 
10426 for a telephone card issuer that is accompanied 
by 4he digital signature of the transaction processor; a s 
transaction processor ID 10427; a service provider ID 
10428; and an issued time 10429, which indicates the 
date on which the clearing completion notification was 
issued. These data are dosed and addressed to the tet- 
ephor>e card issuer, thereby providing the clearing com- io 
pletion notification 6306. 

[1930] Upon receiving the clearing completion notifi- 
cation 6306. tiie telephone card issuing system 
decrypts it and examines tiie digital signature, and gen- 
erates a receipt 6307 and transmits it to tiie service pro- is 
viding system. 

[1931] As is shown in Fig. 105A, the digital signature 
of a telephone card issuer is provided for data that con- 
sists of a receipt header 10500, which is header infor- 
mation indicating that the message is the receipt 6307 20 
Bn6 describing the data structure: a customer number 
10501; telephone card issuing information 10502; a 
payment service code 10503; a payment value 10504; a 
payment option code 10505; a request number 10506; 
a transaction number 10507; clearing information ss 
10508; a transaction processor ID 10509; a telephone 
card issuer ID 10510; and an issued time 1051 1 , which 
indicates the date on which the receipt 6307 was 
issued. These data are closed and addressed to the 
service provider, thereby providing the receipt 6307. so 
The telephone card issuing information 10502 is infor- 
mation concerning the telephone card issuing process 
performed by the telephone card issuing system, and is 
accompanied by the digital signature of the telephone 
card issuer. 35 
[1932] Upon receiving the receipt 6307, the telephone 
card issuer processor of the service providing system 
110 decrypts it and exaorines the digital signature, and 
transmits a rece^ 10512 to the service director proces- 
sor. The service director processor enploys the receipt 40 
10512 to generate a receipt 10523 for a user. 
[1933] In addition, tiie service director processor gen- 
erates a clearing completion notification 10430 for the 
telephone card issuing system, generates an electronic 
telephone card to be issued to the user, and further gen- 4s 
erates an electronic telephone card issuing message 
10227 that includes the electronic telephone card that is 
generated. 

[1934] The user processor closes the electronic tele- 
phone card issuing message 10227 and the receipt so 
10523 while addressing them to the user, and transmits 
them as an electronic telephone card issuing message 
6308 and a receipt 6309 to the mobile user terminal 1 00 
via digital wireless communication. 
[1935] As is shown in Fig. 102B, the digital signature ss 
of a service provider is provided for data that consist of 
an electronic telephone card issuing header 10220. 
which is header information indicating that the message 


is the electronic telephone card issuing message 6308 
and desaibing the data structure; a transaction numt)er 
10221; a request number 10222; the number of tele- 
phone cards 10223; etecti-onic telephone card data 
10224 that are generated; a sen^ice provider ID 10225; 
and an issued time 10226, which indicates the date on 
which the electronic telephone card issuing message 
6308 was issued. These data are dosed and addressed 
to the user, thereby providing the eledronic telephone 
card issuing message 6308. The electronic telephone 
card data 10224 indudes electronic telephone cards 
10231 equivalent in rwmber to the number of telephone 
cards 10223. 

[1936] As is shown in Fig. 105B, the digital signature 
of a service provider is provided for data tfiat consists of 
a receipt header 10516. which is header information 
indicating that the message is the receipt 6309 and 
descrbing the data structure; a user ID 10517; a receipt 
10518 (10512) obtained by decryption; dearing infor- 
mation 10519 for a user that is accompanied by the dig- 
ital signature of a transaction processor; telephone card 
issuing infomiation 10520; a service provider ID 10521 : 
and an issued time 10522. which indicates the date on 
which the receipt 6309 was issued. These data are 
dosed and addressed to the user, thereby providing the 
receipt 6309. The telephone card issuing information 
10520 is infbnmation for the electronic telephone card 
issuing process performed by the service providing sys- 
tem, and is accompanied by the digital signature of the 
service provider. 

[1937] Upon receiving tiie electronic telephone card 
issuing message 6308 and the receipt 6309. the mobile 
user terminal decrypts them and examines the digital 
signatures, enters in the telephone card list 1714 an 
electronic telephone card included in tiie electronic tele- 
phone card issuing message 6308, enters the receipt 
10523 in the use list 1715, and displays the electronic 
telephone card on the LCD 303. 
[1938] The generation of an electronic telephone card 
by the service director processor is performed as fol- 
lows. 

[1939] First the service director processa refers to 
the electronic telephone card template list 5105 for the 
telephone card issuer that is stored in the telephone 
card issuer information server. Then, by using the elec- 
tronic telephone card template program that is identified 
by the template code 10206 of the electronic telephone 
card issuing commission 6303. the service director 
processor generates a telephone card program for an 
electronic telephone card. Specifically, the telephone 
card program data 2113 for an electronic telephone 
card are generated using the transaction nxxlule and 
the representation module, which are described as 
being located at the transaction module address 51 19, 
and the representation module address 5120 in the 
electronic telephone card template list 5105. and the 
representative component information 10209 in the 
electronic telephone card issuing commission 6303. 
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.When the representative component information 10209 
is not present in the electronic telephone card issuing 
commission 6303. the default representative compo- 
nent information located at the default representative 
conrponerrt irrforrnation address .5121. is employed as 5 
the information for an electronic telephone card. 
[1 940] Following this and based on the telephone card 
Information included in the card infbnnation 10217, the 
sen/ice director processor generates the card status 
2107 and the total remaining value 2108. Whether the 10 
card status 2107 can be transfen-ed is designated, and 
the face value of the telephone card that is issued is set 
as the total remaining value 2107. The service director 
processor generates a new pair consisting of a card sig- 
nature private key and a card signature public key, and is 
further generates the telephone card program 2101 for 
an electronic telephone card by employing the card pri- 
vate key and the accounting machine public key that are 
registered in the electronic telephone card management 
information 5500. 20 
[1941] Furthermae. the service director processor 
generates an electronic telephone card by emptying 
the obtained card signature public key to generate the 
certificate 2103 for the electronic telephone card, and 
by enrptoying the telephone card data 1 02 1 9 in the elec- 25 
tronic telephone card issuing commission 6303 to gen- 
erate the presentatton card 2102 for the electronic 
telephone card. 

[1942] The procedures for the delayed clearing will 
now be described. 30 
[1943] In Fig. 64 are shown the procedures for 
exchanging messages between the devices in the tele- 
phone card purchase process for the delayed clearing. 
The same process is performed as is used for the spon- 
taneous clearing until the telephone card issuing sys- 35 
tern transmits the electronic telephone card issuing 
commission to the service providing system. 
[1 944] When the delayed clearing is designated by the 
clearing option 10203, the sennce director processor 
generates an electronic telephone card to be issued to 40 
the user, and also generates the electronic telephone 
card issuing message 10227, which includes the gener- 
ated electronic telephone card, and a temporary receipt 
message 10310. which corresponds to a temporary 
receipt. The generation of the electronic telephone card 4S 
is performed in the same nr^ner as that used for the 
spontaneous clearing. 

[1 945] The user processor closes the electronic tele- 
phone card issuing message 10227 and the temporary 
receipt 981 0 and addresses them to the user, and trans- so 
mits these messages as an electronic telephone card 
issuing message 6404 and a temporary receipt 6405 to 
the mobile user terminal 100 via digital wireless tele- 
phone communication. 

[1946] As is shown in Fig. 103A. the digital signature ss 
of a service provider is provided for data that consists of 
a temporary receipt header 10300, which is header 
informatk)n indicating that the message is the tempo- 


rary receipt 6405 and describing the data structure; a 
user ID 10301; telephone card issuing information 
10302; a payment service code 10303; a payment value 
10304; a payment option code 10305; a request 
number 10306; a transaction number 10307; a service 
provider ID 10308; and an issued time 10309, which 
indicates the date on which the temporary receipt 6405 
was issued. These data are dosed and addressed to 
the user, thereby providing the temporary recept 6405. 
The telephone card issuing information 10302 is infor- 
mation concerning the electronic telephone card issuing 
process that is performed by the service providing sys- 
tem, and is aoconpanied by the digital signature of tiie 
service provider. 

[1 947] The data structure of the electronic telephone 
card issuing message 6404 is tiie same as that used for 
tiie electronic telephone card issuing message 6308. 
[1948] Upon receiving the electronic telephone card 
issuing message 6404 and the temporary receipt 6405. 
tiie mobile user terminal decrypts them and examines 
tiie digital signatures, enters an electronic telephone 
card included in tiie electronk; telephone card Issuing 
message 6404 in the telephone card list 1714, enters 
tiie temporary receipt 10310 in the use list 1715. and 
displays the electronic payment card on tiie LCD 303. 
[1949] Following tiiis, the servk^ director processor 
performs the clearing process for tiie price of the tele- 
phone card. First, tiie service director processor gener- 
ates a clearing request 10324. which is a message 
requesting the performance of the clearing process for 
the price of the telephone card. The transaction proces- 
sor closes the clearing request 10324 arxl addresses it 
to the transaction processor, and transnrrits it as a clear- 
ing request 6407 to the transaction processing system 
106. 

[1950] Upon receiving the clearing request 6407, tiie 
transaction processing system 106 decrypts it and 
examines ttie digital signature, and performs the clear- 
ing process. The transaction processing system 106 
generates a clearing completion notification 6408 and 
transmits it to tiie service providing system 1 10. 
[1951] Upon receiving the clearing completion notifi- 
cation 6408. the transaction processor of the service 
providing system 1 10 decrypts it and examines the dig- 
ital signature, and transmits a clearing completion noti- 
fication 10413 to the service director processor. The 
service director processor employs ttie received clear- 
ing completion notification 10413 to generate a clearing 
completion notification 10430 for tiie telephone card 
issuer. And tiie telephone card issuer processor closes 
tiie clearing completion notification 10430 and transmits 
it to tiie telephone card issuing system 1 09 as a clearing 
completion notification 6409 for the telephone card 
issuer. 

[1952] The telephone card issuing system decrypts 
tiie received clearing completion notifk:ation 6409 and 
examines the digital signature, and generates a receipt 
6410 and transmits it to the service provkling system. 
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[1953] The telephone card issuer processor of the 
service provicGng system deaypts the received receipt 
6410 arxl examines the digital signature, and transmits 
a receipt 10512 to the service director processor. The 
service director processa employs the receipt 1 051 2 to- 5 
generate a receipt 10523 for a user 
[1954] The receipt 10523 that is generated is not 
immediately transmitted to the mobile user terminal 100 
of the user. When the nrtobile user terminal has per- 
formed the data updating process, the user processor 10 
replaces the temporary receipt 10310 In the use list 
1715 with the receipt 10523. and transmits the receipt 
10523 as one part of the update data 641 1 to the mobile 
user terminal 100. 

[1955] The data structures of the clearing request is 
6407. the clearing completion notification 6408, the 
clearing completion notification 6409 and the receipt 
6410 for the delayed clearing are the same as those 
provided for the clearing request 6304, the clearing 
completion notification 6305, the clearing conpletion 20 
notification 6306 and the receipt 6307 for the spontane- 
ous clearing. 

[1956] The delayed clearing process need not be per- 
formed immediately after the electronic telephone card 
is issued, and together with the other clearing proc- 25 
esses, may be performed, for example, once a day. 
[1957] An e)q3lanation will now be given for the con- 
tents of messages that are exchanged by the mobile 
user terminal 100 and the service providing system 1 10 
during the telephone card registration processing. 30 
[1958] In Rg. 65C are shown the procedures for 
exchanging messages between devices in the tele- 
phone card registration processing, arxl in Figs. 108A 
and 108B are shown the contents of messages that are 
exchanged by the devices in the telephone card regis- 35 
tration processing. 

[1 959] First when the user perfbrrrrs an electronic tel- 
ephone card registration operation 6508. the mobile 
user terminal generates a telephone card registration 
request 6509 and transmits it to the service providing 40 
system via digital wireless telephone communication. 
[1960] As is shown in Fig. 108A. the digital signature 
of a user is provided for data that consists of a tele- 
phone card registration request header 10800, which is 
header information indicating that the n^essage is the 46 
telephone card registration request 6509 and describing 
the data structure; a card ID 10801 of a telephone card 
to be registered; a user ID 10802; and an issued time 
10803, which indicates the date on which the telephone 
card registration request 6509 was issued. These data so 
are closed and addressed to the s^ce provider, 
thereby providing the telephone card registration 
request 6509. 

[1961] The user processor of the service providing 
system decrypts the received telephone card registra- ss 
tion request 6509 and examines the digital signature, 
and transmits the request 6509 to the service manager 
processor. The service manager processor generates a 


service director processor to form a process group that 
processes a telephone card registration request 10804. 
The service director processor ascertains that the elec- 
tronic telephone card indicated by the card ID 10801 is 
registered in the telephone card list 4612 for the user in 
the user Information server 902, and registers that elec- 
tronic telephone card in the registered card list 5502 for 
electronic telephone cards of the service director infor- 
mation server 901. At this time, the service director 
processor newly generates a card signature private key 
and a card signature public key pair. Further, the service 
director processor generates a registered card certifi- 
cate using the card signature public key, and registers it 
in the registered card list 5502. The service director 
processor then generates a card certificate issuing 
message 10813 using the card signature private key 
and the registered card certificate that has been gener- 
ated. The user processor closes the card certificate 
issuing message 10813 and addresses it to the user, 
and transmits it as a telephone card certificate issuing 
message 6510 to the mobWe user terminal via digital 
wireless telephone communication. 
[1962] As is shown in Fig. 108B. the digital signature 
of a service provider is pm\6e6 for data that consists of 
a telephone card certificate issuing header 10808, 
which is header information indicating that the message 
is the telephone card certificate issuing message 6510 
and describing tiie data structure; a card digital signa- 
ture private key 10809; a registered card certificate 
10810; a servkie provider ID 10811, and an issued time 
10812, which indicates the date on which the telephone 
card certificate issuing message 6510 was issued. 
These data are closed and addressed to the user, 
thereby provicfing the telephone card certificate issuing 
message 6510. 

[1963] The mobile user terminal 100 decrypts the 
received card certificate issuing message 6510 and 
examines the digital signature, replaces the card signa- 
ture private key and tiie card certificate of an electronic 
telephone card with the card signature private key 
10809 and the registered card certificate 10810. botti of 
whk;h are included in the telephone card certificate 
issuing message 6510, changes the registration state in 
the card status to the post-registration state, and dis- 
plays on the LCD the electronic telephone card that has 
been registered (display a telephone card that is regis- 
tered; 6511). 

[1964] An explanation wilt now be given for the con- 
tents of messages tiiat are exchanged by the service 
provkling system 1 10 and the electronic telephone card 
accounting machine 800 (switching center 105) during 
the tel^hone card setup processing. 
[1965] The telephone card setup processing is not 
performed in accordance with a special processing 
sequence, Ixjt is performed in the data updating proc- 
ess during which the service providing system ipdates 
the data In the electronic telephone Ccird accounting 
machine 800. 
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[1966] Therefore, for the telephone card setup proc- 
ess, the procedures for the exchar^ of messages by 
the service providing system and the electronic tele- 
phone card accounting machine 800. and the corrtents 
(data structures) of the messages to be exchanged are 5 
the same as those used for the above described data 
updating processing. 

[1 967] It should be noted, however, that the telephone 
card setup process Is not perfbmied each time the data 
updating process is performed, but when the telephone 10 
card list 4610 for the merchant stored in the merchant 
information server 903 is updated by the service direc- 
tor processor. 

[1968] When the telephone card list 4610 is updated, 
the merchant processor includes updated data in the 75 
telephone card list 4610 for the compressed update 
data 8828 in the update data 5705, and transmits the 
resultant data as update data 5705 to the electronic tel- 
ephone card accounting machine 800. 
[1 969] Upon receiving the update data 5705, the elec- 20 
tronic telephone accounting machine deconrpresses 
the update data 8628. and updates the data in the RAM 
and on the hard disk. At this time, the telephone card list 
3908 in the electronic telephone card accounting 
machine 800 is updated, and an electronic telephone 26 
card that is handled by the electronic telephone card 
accounting machine 800 Is updated. 
[1970] An explanation will now be given for the con- 
tents of messages that are exchanged by between the 
mobile ussr terminal 100 and the electronic telephone 30 
card accounting machine 800 (switching center 105) 
during the telephone card clearing processing. 
[1971] In Fig. 70 are shown procedures for the 
exchange of messages by the nrK>bile user terminal 1 00 
and the electronic telephone card accounting machine 3S 
800 (switching center 105) during the telephone card 
clearing processing, and in Figs. 114A and 114B and 
Figs. 115A and 115B are shown the contents of mes- 
sages that are exchanged by the mobile user temninat 
100 and the electronic telephone card accounting 40 
machine 800 (switching center 105) during the tele- 
phone card clearing processing. 
[1972] First, when a user displays an electronic tele- 
phone card used for communication and performs a 
calling operation 7000. the mobile user terminal 4S 
employs a telephone card that is to be used for commu- 
nication and an arbitrarily generated test pattern and 
produces a micro-check call request 7001. which is a 
message for requesting that a telephone number 
entered by a user be dialed by using the electronk: tele- so 
phone card. The mobile user terminal transmits the 
request 7001 to the switching center 105 via infrared 
communicatbn. 

[1973] As is shown in Rg. 1 14A. the micro-check call 
request 7001 consists of a microKiheck call request 55 
header 11400. which is header infonmation indicating 
that the message is the micro^heck call request 7001 
and describes the data structure; a service code 1 1 40 1 , 


which klentif ies the request for communication using an 
electronic telephone card; a request number 11402. 
which is an art)itrarily generated mjmber that uniquely 
represerrts the telephone card clearing process: an tel- 
ephone nunrtoer 11403 thai is a telephone number 
entered by the user; a presentation card 11403 for pre- 
senting an electronic telephone card to be used for the 
comnuinication: a card certifkate 11 405; a current card 
status 11406 for an electronk; telephone card to be 
used for the communication; a total remaining value 
11407; a card ID 11408; an issued time 11409. which 
indk^ates the date on which the micro-check call request 
7001 was issued; and an accounting machine test pat- 
tern 11411, which is an art)itrarily generated test pat- 
tern. The digital signature is provkjed, using the card 
signature private key of an electronic telephone card, for 
the card status 11406, the total remaining value 11407, 
the card ID 11408 and the issued time 11409. The 
accounting machine test pattern 11411 is encrypted 
using the accounting machine public key. 
[1974] The presentatbn card 1 1404. the card certifi- 
cate 1 1405. the card status 1 1406. the total remaining 
value 11407, the card ID 11408 and the issued date 
1 1409 specify the contents of the electronic telephone 
card for the electronic telephone card accounting 
machine 800. eind the accounting machine test pattern 
1 141 1 is a test pattern tor authorizing the electronic tel- 
ephone card accounting machine 800. 
[1975] Upon receiving the miao-check call request 
7001 at the switching center 105. first, the electronic tel- 
ephone card accounting machine 800 refers to the tele- 
phone card list 3908 and activates a telephone card 
clearing module that corresponds to the card code 
(included in a presentation card) for the electronic tele- 
phone card that is presented. Then, the electronic tele- 
phone card accounting machine 800 examines the 
validity of the contents of the mk:ro-dieck call request 
7001. generates a miao-check call response 7002. 
which charges a communicatk)n fee V (V < 0) for a pre- 
determined communication T (T > 0), and transmits it to 
the mobile user terminal via digital wireless telephone 
communication. When the electronic telephone card 
that is presented is not registered in the telephone card 
list 3908. the micro-check call response 3908 is trans- 
mitted, which indicates that the pertinent electronic tele- 
phone card is not available. 

[1976] In the verification processing for determining 
the validity of the micro-check call request 7001, first, 
the electronic telephone card accounting machine 800 
employs the fact that the card certificate 1 1405 is a reg- 
istered card certificate, and examines the card status 
1 1406 and the total remaining value 11407 to determine 
whether the electronic telephone card is valid and can 
be used as a telephone card for the payment of the 
communication charge. Then, the electronic telephone 
card accounting machine 800 examines the presenta- 
tion card 1 1404. the digital signature of the service pro- 
vkler that is provided for the card certif k:ate 1 1405, and 
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the validity term. Further, the merchant terminal 
employs the card signature pufc)lic key of the card certif- 
icate 1 1 405 to examine the digital signature of the elec- 
tronic telephone card that is provided for the card status 
11406, the total remaining value 11407, the card ID 5 
11408 and the issued time 11409. In this fasNon, the 
validity of the micro-check call request 7001 is verified. 
[1977] In the generation of the micro-check call 
response 7002, the electronic telephone card account- 
ing machine 800 decrypts the accounting machine test 10 
pattern 11411 using the accounting machine private 
key, and employs the card public key to encrypt the card 
test pattern 11411 that is arbitrarily generated. 
[1978] As is shown in Fig. 1 14B, the digital signature 
of a communication service provider is provided for the is 
data that consists of a micro-check call response 
header 11413, which is header information indicating 
that the message is the miao-check call response 7002 
and desai3ing the data structure: a transactk)n number 
1 1414; a response message 11415; a request nunri>er 20 
1 1416; a card ID 1 141 7; an Instruction code 1 1418; an 
amount of charge 1 1419. which indicates the communi- 
cation fee V for the comnunication time T; an account- 
ing machine test pattern 1 1420, which is decrypted; a 
card test pattern 11421, which is an arbitrarily gener- 2s 
ated test pattern; an accounting machine ID 11423; a 
communication service provider ID 11424; and an 
issued time 1 1425, which indicates the date on which 
the miao<heck call response 7002 was issued. In this 
fashion, the micro-check call response 7002 is pro- so 
vided. The card test pattern 11421 is enaypted using 
the card public key. 

[1979] The transaction number 11414 is a number 
that is arbitrarily generated, by the electronic telephone 
card accounting machine 800, and that uniquely repre- 35 
serrts the telephone card clearing process. When, as a 
result of the examination of the micro-check call request 
7001, the telephone card clearing process can not be 
performed (when an electronic telephone card is one 
that can not be handled by the pertinent electronic tele- 40 
phone card accounting machine 800). a value of 0 is 
set When the telephone card clearing process can be 
performed, a value other than 0 is set. 
[1960] The response message 1 1415 is text informa- 
tk)n constituting the message transmitted by the conv 45 
munication service provider to the user. When the 
electronic telephone card accounting machine 800 can 
not handle an electronic telephone card that has been 
presented (transaction number = 0). data to that effect is 
included In the response message. The response mes- so 
sage is prepared optionally, and may not be prepared. 
[1981] Ihe instaictlon code 1 1418 is command code 
information for an electronic telephone card, and is 
used when a value equivalent to the amount of charge 
1 1419 is subtracted from the total r&naining value held ss 
by the electronic telephone card. The instruction code is 
varied by combining the electronic telephone card 
transaction module and the telephone card clearing 


module. 

[1982] When the mobile user terminal receives the 
micro-check call response 7002, first, for verification of 
to verify the electronic telephone card accounting 
machine 800,it compares 1he accounting nrachine test 
pattern 1 141 1 with the accounting nrwchine test pattern 
1 1420 included in the miao-check call response 7002 
in order to verify the electronic telephone card account- 
ing machine 800. The mobile user terminal subtracts 
the amount of sates 11419 from the total remaining 
value held by the electronic telephone card in accord- 
ance with the Instruction code 11418. Then, the mobile 
L^r terminal decrypts the card test patten using the 
card private key. and generates a telephone micro- 
check message 7003, which corresponds to a check 
that has as its face value the amourrt of the charge. The 
check is transmitted via digital wireless telephone com- 
munication to the electronic telephone card accounting 
machine 800 (switching center 105). Further, the mc^ile 
user terminal displays, on the LCD, a message indicat- 
ing a call is on process (display a call on process; 6704) 
[1 983] As is shown in Fig. 1 1 5 A. the digital signature 
using the card signature private key and the digital sig- 
nature of a user are provided for the data that consists 
of a telephone micro-check header 11500. which is 
header information Indicating that the message is the 
telephone micro-check 7003 and deserving the data 
structure; a micro-check issuing number 11501, which 
indicates the order of the telephone card clearing proc- 
ess: a card test pattern 11502, which is decrypted; an 
amountof payment 11503, which indicates the obtained 
value that is subtracted from the total remaining value; a 
card status 1 1504; a total remaining value 11505 avail- 
able after the subtraction; an accounting machine ID 
11506; a communication service provider ID 11507; a 
request number 1 1508; a transaction number 1 1509; a 
card code 11510; a card ID 11511;andan issued time 
1 1512. which indicates the date on which the telephone 
micro-check 7003 was issued. In this fashion, the tele- 
phone micro-check 7003 is provided. 
[1984] Upon receiving the telephone micro-check 
7003 at the switching center 1 05. first, the electronic tel- 
ephone card accounting machine 800 authorizes the 
electronic telephone card by comparing the card test 
pattern 11421 with the card test pattern 11502 that is 
Included in the telephone micro-check 7003, and exam- 
ines the validity of the contents of the telephone micro- 
check 7003. In the verification process for the validity of 
the telephone micro-check 7003. the electronic tele- 
phone accounting machine 800 determines whether the 
amount of payment 11503 represented by the tele- 
phone micro-check 7003 is equal to the value of the 
charge. Also, the electronic telephone card accounting 
machine 800 determines whether the value obtained by 
sii3tracting the total remaining value 11505 from the 
total remaining value 11407, wNch represents the 
mrcro-check call request, is equal to the amount of pay- 
ment 1 1503 represented by the telephone micro-check. 
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Finally. Die electronic telephone card accounting 
machine 800 examines the digital signature of the elec- 
tronic telephone card accompanying the telephone 
micro-check 7003. 

[1 985] The switch 801 transmits; to the telephone ter-' s * 
minal 115, a call arrival request 7005, which is a mes- 
sage for catling the telephone terminal 115 that 
corresponds to the telephone number 11403. Upon 
receiving the call arrival request 7005, the telephone 
terminal 1 15 outputs a call tone to notify the owner (call io 
receiver) of the telephone ternrtinat 115 that a call has 
arrived (display the arrivat of a call; 7006). When the 
redpierit raises the handset (communication operation 
7007). the telephone terminal 115 transrrtts. to the 
switch 80 1 , a call response 7008. which is a message to is 
permit the call. 

[1986] When the switch 801 receives the call 
response 7008. the electronic tel^^hone card account- 
ing machine 800 generates a receipt message 7009 
that corresponds to a receipt for the telephone micro- 20 
check 7003 that is paid, and transmits the message to 
the mobile user terminal via digital wireless telephone 
communicatk)n. The switch 801 connects the lines of 
the mobWe user terminal 100 and the telephone temiinal 
115, so that the user can communicate With the call 25 
recipient 

[1 987] As is shown in Fig. 1 1 5B. the digital signature 
of a merchant is provided for the data that consists of a 
receipt header 11514, which is header informatk)n indi- 
cating that the message is the receipt 7009 and describ- 30 
ing the data structure; provided service information 
11515; a card ID 11516; a total receipt value 11517. 
which reflects the same value as the amount of payment 
11503 remitted by the tel^hone micro-check that is 
received; a request number 11518; a transaction 35 
number 11519; a telephone micro-check issuing 
number 11520; an accounting machine ID 11521; a 
communication service provkler ID 11522; and an 
issued time 11523, which indicates the date on whteh 
the receipt 7009 was issued. In this fashion, the receipt 40 
7009 is provided. 

[1988] The provided service information 11515 is text 
infamation that represents the contents of the commu- 
nication service provided through the telephone card 
clearing process, and con'esponds to the specifications 4S 
or the statement of accounts for the services that are 
provided. 

[1989] Upon receiving the receipt 7009. the mobile 
user tenninal verifies that the total receipt value 1 1517 
is equal to the amount of payment 1 1 503 remitted using so 
the telephone micro-check, registers the receipt 7009 
as usage information in the usage list 1715. and 
changes the display on the LCD to a display indicating 
the connection state (the telephone number used for 
communication, the elapsed oomnuinication time and ss 
the total remaining value of an electronic telephone 
card) (dsplay the connection state; 7010). 
[1990] When the mobile user terminal 100 does not 


receive the receipt 7009 after it has transmitted the tel- 
ephone micro<heck 7003. for example, when the user 
presses the end switch 306 while the ringing is in 
progress and cancels the call before the receipt 7009 is 
- received, the mobile user terminal 100 adds the amount 
of sales 1 1419 to the total remaining value of the elec- 
tronic telephone card, and returns the value to what it 
was before the subtraction was performed. 
[1991] When the communication time exceeds T, 
instead of the telephone micro-check 7003 having the 
face value V, the electronic telephone accounting 
machine transmits a communication charge message 
7011. which is a charge requiring the submission of a 
telephone micro-check having a f^e value tfiat equals 
a communicalwn fee 2V charged for a communication 
time 2T. to the mobile user terminal via digital wireless 
telephone communication. 

[1 992] As is shown in Fig. 1 1 5C. the digital signature 
of a communication service provkJer is provkJed for the 
data that consists of a communication charge response 
healer 11524, which is header information indicating 
that the message is the communicatkxi charge 701 1 
and desaibing the data structure; a transaction number 
11515; a request number 11526; a card ID 11527; an 
instruction code 11528; an arrK>unt of charge 11529. 
which accesses an additbnal charge value V; an 
accounting machine ID 11530; a communicatkxi eerv- 
k;e provider ID 1 1531 ; and an issued time 1 1 532. which 
indicates the date on which the communication charge 

7011 was issued. In this fashion, the comnrrunication 
charge 7011 is provided. The transaction number 
11525 is the same as the transaction numt>er 11414 
provided for the micro-check call response 7002, the 
tiBnsactran number 11509 for the telephone miao- 
check 7003, and the transactwn number 11519 for the 
receipt 7009. 

[1993] Upon receiving the communication charge 
701 1 . the mobile user terminal sutrtracts the amount of 
charge 1 1529 (the additional charge value V) from tine 
total remaining value of the electo-onic telephone card. 
Instead of the telephone micro-check 7003. the mobile 
user terminal generates a telephone micro-check 7012, 
which has a face value of 2V that con-esponds to the 
total value subtracted from the total remaining value, 
and transmits it to the electronic telephone accounting 
machine 800 (switching center 105) via digital wireless 
telephone oomnuinication. 

[1 994] As is shown in Fig. 1 1 5A, the data structure of 
the telephone micro-check 7012 is the same as that of 
tiie telephone micro-check 7003. The amount of pay- 
ment 11503 remitted by the telephone nticro-check 

7012 is 2V. which corresponds to the total value sub- 
tracted from the total remaining value, and the total 
renuiining value 1 1505 is the total remaining value after 
the amount of charge 1 1 529 has been subtracted. 
[1995] The same numbers as are used for the tele- 
phone micro-check 7003 are also employed as the 
micro-check issuing number 1 1501 . the request number 
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11508 and the transaction nunnber 11509 in the tele- 
phone micro-check 7012, which identify the telephone 
micro-check that is issued as the replacement for the 
telephone micro-check 7003. 
[1996] - Upon receiving the telephone- micro-check 

7012, the electronic telephone card accounting 
machine verifies the validity of the telephone micro- 
check 7012, and generates a receipt message 7013 
that corresponds to a receipt for the telephone micro- 
check 7012 that has been issued and transmits it to the 
vndbWe user terminal via the digital wireless telephone 
terminal. 

[1 997] During the process of examining the validity of 
the telephone micro-check 7012, first, the electronic tel- 
ephor>e card aooounting machine 800 ascertEuns that 
the amount of payment 11503 reflected by the tele- 
phone micro-check 7012 is equal to the total amount 
charged, and ascertains that the result obtained by sub- 
tracting the total remaining value 11505. indicated by 
the telephone micro-check 7012, from the amount of 
stored value 1 1407. indicated by the macro check call 
request, is equal to the total amount of payment 11503 
reflected by the telephone micro-check. Then, the 
accounting machine 800 examines the digital signature 
that is provkled for the telephone miao-check 7012 
using the electronic telephone card. 
[19^] As is shown in Fig. 1 1 5A, the data structure of 
the receipt 7013 is the same as that used for the receipt 
7009. The total receipt value 1 1517 of the receipt 7013 
is equal to the amount of payment 1 1503 reflected by 
the telephone micro-check 7012. 
[1999] Upon receiving the receipt 7013, the wdbWe 
user terminal verifies that the total receipt value 11517 
Is equal to the amount of payment 1 1 503 reflected by 
the telephone micro-check 7012, registers the receipt 

7013, instead of the receipt 7009. as usage infomr^tion 
in the usage list 1715, and updates the total remaining 
amount of the electronic telephone card that is dis- 
played on the LCD (display the accounts: 7014). 
[2000] When the mobile user terminal 100 does not 
receive the receipt 7013 after it has transmitted the tel- 
ephone nticro-check 7012, such as when, for example, 
the communication is terminated before the receipt 
7013 is received, the mobile user terminal 100 adds the 
amount of charge 1 1 529 to the total remaining value of 
the electronic telephone card, and returns the value to 
what it was before the amount of charge 11529 was 
subtracted. 

[2001 ] Each time the communication time exceeds NT 
(T is a natural number), instead of the telephone micro- 
check having the face value NV, the electronic tele- 
phone accounting machine 800 transmits a communi- 
cation charge message 7015, which includes a charge 
for a telephone micro-check having as a face value a 
communication fee (N+1)V that is assessed for a com- 
munication time (N-i-l)T, to the mobile user terminal via 
digital wireless telephone communication. As is shown 
in Rg. 115C, the data structure of the communication 


charge 701 5 is the same as that used for the communi- 
cation charge 7011. 

[2002] The mobile user terminal further subtracts the 
anx)unt of charge 11529 (additional communication 
5 charge value V) from the total remaining value of the 
electronic telephone card, generates a telephone micro- 
check 7016 having a face value of (N+1)V. which corre- 
sponds to the total value subtracted from the total 
remaining value, and transmits it to the electronic tele- 
fa phone card accounting machine 800 (switching center 
105) via digital wireless telephone communication. 
[2003] As is shown in Fig. 1 15A, the data structure of 
the telephone nricro-check 7016 is the same as that 
used for the telephone micro-check 7003 or 7012. The 
15 amount of payment 11503 reflected by the telephone 
micro-check 7016 is (N+1)V. which corresponds to the 
total value subtracted from the total remaining value, 
and the total remaining value 11505 is that which is 
available after the amount of charge 11529 has been 
20 subtracted. 

[2004] Upon receiving the telephone micro^eck 

7016. the electronic telephone card accounting 
nwchine 800 examines the validity of the telephone 
micro-check 7016, and generates a receipt message 

2S 7017 that con^esponds to a receipt for the telephone 
micro-check 7016 that has been pakj and transmits it to 
the nf>obile user terminal via digital wireless telephone 
communication. 

[2005] During the process of examining the validity of 
30 the telephone micro-check 7016, first, the electronk: tel- 
ephone card accounting machine 800 ascertains that 
the amount of payment 11503 reflected by the tele- 
phone mk:ro-check 7016 is equal to the total amount cf 
the charge, and ascertains that the result obtained by 
35 subtracting the total remaining value 11505, indicated 
by the telephone micro-check, from the total remaining 
value 1 1407. indicated by the macro check call request, 
is equal to the total amount of payment 1 1 503 reflected 
by the telephone micro-check. Then, the accounting 
40 nrmchine 800 uses the electronic telephone card to 
examine the digital signature that is provkied for the tel- 
ephone micro-check 7016. 

[2006] As is shown in Fig. 1 1 5B. the data structure of 
the receipt 701 7 is the same as that used tor the receipt 
45 701 3. The total receipt value 1 1 51 7 of the receipt 701 7 
is equal to the anK>unt of payment 11503 of the tele- 
phone micro-check 7016. 

[2007] Upon receiving the receipt 7017. the rncbWe 
user terminal verifies that the total receipt value 1 1517 
50 is equal to the amount of payment 1 1503 reflected by 
the telephone micro-check 7016, registers the receipt 

7017. instead of the receipt having type same request 
nunt}er (the previously registered receipt), as usage 
information in the usage list 1715. and updates the total 

55 remaining amount of the electronic telephone card tfiat 
is displayed on the LCD (display the accounts; 7018). 
[2008] When the mobile user terminal 100 does not 
receive the receipt 7017 after it has transmitted the tel- 
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ephone micro-check 7016. such as when, for example, 
the communication is temrtinated before the receipt 
7017 is received, the mobile user terminal 100 adds the 
amount of charge 1 1529 transmitted in the communica- 
tion charge message 7015 to th& total remaining value 
of the electronic telephone card, and returns the value 
to what it was before the amount of charge 1 1529 was 
subtracted. 

[2009] When a communication session using the elec- 
tronic telephone card is terminated, the mobile user ter- 
minal 100 increments the micro-check issue number of 
the electronic telephone card. 
[2010] At the terminatk)n of a communication session, 
the electronic telephone card accounting machine 800 
registers, in the transaction list 3909, the receipt that 
has been transmitted to the mobile user ternronal and 
the coresponding telephone micro-check as history 
information for the telephone card clearir>g process. 
[2011] The contents of the call aniveil request 7005 
and the call response 7008. wfiich are messages 
exchanged by the switching center 105 and the tele- 
phone terminal 115. depend on the protocol for the line 
connection established between the switching center 
105 and the telephone terminal 115. 
[2012] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the telephone card reference processing. 
[2013] In Fig. 73 are shown procedures for the 
exchange of messages by the devices during the tele- 
phone card reference processing, and in Figs. 88A to 
88D and Fig. 1 1 6B are shown the contents of messages 
that are exchanged during the telephone card reference 
processing. 

[2014] The telephone card reference processing is not 
performed in accordance with a special processing 
sequence, txjt is performed In the data updating proc- 
ess during which the service providing system updates 
the data In the electronic telephone card accounting 
machine 800. 

[20151 Therefore, for the telephone card reference 
process, the procedures for the exchange of messages 
by the electronic telephone card accounting machine 
800 and the service providing system, and the contents 
(data structures) of the messages to be exchanged are 
the same as those employed for the above deschbed 
data updating processing. 

[2016] Compressed upload data 8818 in the upload 
data 5704 include a telephone miao-check that is newly 
registered in the transaction list 3909 during the tele- 
phone card clearing process conducted during the 
period extending from the previous performance of the 
data updating process to the cun^ent performance of the 
data updating process. 

[2017] During the data updating processing, the mer- 
chant processor transmits, to the service manager proc- 
essor, a message requesting the reference process be 
performed for the telephone nrticro-check that is 
uploaded from the electronic telephone card accounting 


machine 800. The service manager processor gener- 
ates a service director processor to form a process 
groLp for examining the validity of the telephone micro- 
check. 

[2018] First, the service director processor determines 
whether the accounting machine ID 1 1505 and the com- 
munication service provider ID 11506 in the telephone 
micro-check match the accounting machine ID 5215 of 
the communication service provider and the communi- 
cation service provider ID 5214. Then, the service direc- 
tor processor examines the registered card list 5502 in 
the service director information server 901 to verify that 
the electronic telepfione card for which the telephone 
micro-check was issued is registered. The service 
director processor enpkiys the user public key 5519 to 
examine the digital signature of the user that acconpa- 
nies the telephone micro-check, and employs the regis- 
tered card certificate to examine the digital signature for 
the telephone card that accompanies the telephone 
micro-check. In addition, the service director processor 
enploys the telephone micro-check issuing number 
when examining the matching of the anYount of payment 
with the total remaining value, and transmits the result 
of the exanvnation to the merchant processor. As a 
result the telephone micro-check that is ascertained to 
be valid Is registered in the telephone micro-check list. 
[2019] When an en-or occurs in the process for verify- 
ing the validity of the telephone miao-check. the service 
director processor transmits a message indicating that 
an error occurred In the management system 908. 
[2020] Upon receiving the update data 5705, the elec- 
tronic telephone card accounting machine 800 decom* 
presses the update data 8828 and ipdates the data in 
the RAM and on the hard disk, 
[2021 J If the firm represented by the communication 
service provider differs from that represented by the tel- 
ephone card issuer, and a payment for the communica- 
tion service provider who handles the telephone card is 
made by the telephone card issuer, or if the usage of the 
telephone card is periodically reported to the telephone 
card issuer In accordance with the terms of a contract, 
in accordance with the telephone micro-check that is 
newly registered in the telephone micro-check list, the 
service director processor generates weekly, for exam- 
ple, a usage condition notification 11626. which is a 
message for notifying the telephone card issuer of the 
telephone card usage condition. The telephone card 
issuer processor closes the notification 11626 and 
addresses it to the telephone card issuer, and transmits 
it as a usage report 7300 to the telephone card issuing 
system 109. 

(2022) As is shown in Rg. 1 16C. the digital signature 
of a service provider is provided for the data that con- 
sists of a usage report header 11620. which is header 
irrformation indicating that the message is the usage 
report 7300 and descritung the data structure: a card ID 
and payment value list 11621 of telephone cards that 
are enrptoyed: the communication service provider 
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name 11622 and the communication service provider ID 
1 1 623 of a comnrunication service provider that handles 
the telephone card; a service provider ID 1 1624; and an 
issued time 1 1625, which indicates the date on which 
the usage report 7300 was issued. These data are 
closed and addressed to the telephone card issuer, 
thereby providing the usage report 7300. 
[2023] Upon receiving the usage report 7300, the tel- 
ephone card issuing system 109 decrypts it and exam- 
ines the digital signature, and perfornYs such processing 
as making a payment to the nr)erchant. 
[2024] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the telephone card transfer processing. 
[2025] In Fig. 76 are sfxiwn procedures for the 
exchange of messages by the devices during the tele- 
phone caid transfer processing, and in Rgs. 120 A and 
120B. 121 A and 121B. and 122A and 122C are shown 
the contents of messages that are exchanged during 
the telephone card transfer processing. 
[2026] The telephone cad transfer process can be 
performed when the card status 2107 of the electronic 
telephone card indicates the trcmsfer enabled state, 
which is designated by the telephone card issuer when 
issuing a telephone card. 

[2027] In Fig. 76 ts shown a case where user A trans- 
fers an electronic telephone card to user B. The proce- 
dures for the exchange of messages by the devices 
belonging to users A and B are the same for infrared 
comnurnication as they are for digital wireless communi- 
cation. The data structures of messages are also the 
same. 

[2028] In Fig. 76, first, when user A performs a tele- 
phone card transfer process 7600. the nrxsbile user ter- 
minal of user A transmits a telephone card transfer offer 
7601. wf^ch is a message offering to trartsfer an elec- 
tronic telephone card, to the mofcMie user terminal of 
user B. When at this time the mobile user terminals of 
user A and user B are connected, communication 
between user A and user B is perfonmed via digital wire- 
less telephone. When the mobile user terminals are not 
connected, infrared communication is employed. 
[2029] As is shown in Fig. 120A. the digital signature 
of user A is provided for the data consisting of a card 
transfer offor header 12000, which is header infomnation 
indicating that the message is the card transfer offer 
7601 and desCTibing the data structure; a transfer offer 
number 1 2001 . which is an art>itrarily generated number 
that uniquely represents the telephone card transfer 
process; a presented card 12002 and a card certificate 
12003 for an electronic telephone card to be trans- 
ferred; a card status 12004; a total remaining value 
12005; a card ID 12006; an issued time 12007. which 
indicates the date on which the card transfer offer 7601 
was issued: and a user public key certificate 12009. In 
this fashion, the card transfer offer 7501 is provided. 
Tlie digital signature of the electronic telephone card is 
provided, using the card signature private key. for the 


card status 12004, the variable card information 12005. 
the card ID 12006 and the issued time 12007. 
[2030] The digital signature of the service provider is 
provided for the data that consist of a user put}lic key 

5 deader 12010^ the user public key 12011 of user A; a 
public key certificate ID 12012. which is ID information 
for tiie public key certificate; a certificate validity term 
12013; a service provider ID 12014; and a certificate 
issued time 12015. In this fashion, the user public key 

10 certificate 1 2009 is provided. 

[2031] H^on receiving the card twister offer 7601 . the 
mobile user terminal of user B examines the presented 
card 12002. the card certified 12003. and the digital sig- 
nature of the service provider and the validity term of 

15 the public key certifk^ate 12009. Then, the mobile user 
terminal examines the digital signature of tiie electronic 
telepfKHie card that is provided for the card status 
12004. the total remaining value 12005, the card ID 
12006 and the issued time 12007, and the digital stgna- 

20 ture of user A accompanying the card transfer offer 
7601 . and verifies the contents of the card t-ansfer offer 
7501 . In accordance with the presented card 1 2002. the 
card status 12004 and the total remcuning value 12005. 
the mot>ile user terminal then displays, on tiie LCD. the 

25 conterrts of the electronic telephone card that is to be 
transfen-ed (display the transfer off©'; 7602). 
[2032] When user B performs a transfer offer accept- 
ance operation 7603. the mobile user terminal of user B 
tansmits. to the mobile user terminal of user A. a card 

30 transfer offer response 7604. which is a response mes- 
sage for the card f ansfer offer 7601 . 
[2033] As is shown in Fig. 120B, the digital signature 
of user B is provided for tiie data that consist of a card 
tnnsfer offer resporrse header 12016. which is header 

35 information indicating that the message is the card 
transfer offer response 7604 and describing tine data 
structure: an acceptance number 1 201 7; a t-ansfer offer 
nunrt)er 12018: a card ID 12019; an issued tinr>e 12020. 
which indicates the date on which the card fransfer offer 

40 response 7604 was issued; and a user put)lic key certif- 
icate 12021. in this feshion. the card transfer offer 
response 7604 is provided. 

[2034] TTie user public key certificate 1 202 1 is a put>lic 
key certificate for user B. To provide this certificate 

45 12021. the digital signature of the service provider is 
provided for the data that consist of a user public key 
certificate header 12022; a user public key 12023 for 
user B; a public key certificate ID 12024. which is ID 
information for tiie public key certificate; a certificate 

50 validity term 12025; a sen/ice provider ID 12026; and a 
certificate issued time 12027. 
[2035] The acceptance numt>er 12017 is arbitrarily 
generated, by the mobile user terminal of user B, as a 
number that unquely represents the telephone card 

55 transfer processing. With this number, the mobile user 
terminal of user A is notified as to whether user B has 
accepted the card transfer offer 7601. When user B 
does not accept the card transfer offer 7601 . a value of 


170 


339 


EP0950 968A1 


340 


0 is set as the acceptance number 1201 7. When user B 
accepts the card transfer offer 7601 . a value other than 
0 is set. 

[2036] Upon receiving the card transfer offer response 
7604. the mobile usertemninal of user A displays, orrthe 
LCD, the contents of the card transfer offer response 
7604 (display the transfer offer response; 7605). When 
the card transfer offer 7601 is accepted (acceptance 
numt)er 12017 0), the mobile user terminal of user A 
examines the digital signature of the service provider of 
the user public key certificate 12021 and the validity 
term. The mobile user terminal generates a card trans- 
fer certificate 7606, which is a message that care- 
sponds to a transfer certificate for an electronic 
telephone card to user B. and transmits it to the mobile 
user terminal of user B. 

[2037] As is shown in Fig. 121 A, the digital signature 
of the electronic payment and the digital signature of 
user A are provided for the data that consist of a card 
transfer certificate header 12100, which is header Infor- 
mation indicating that the message is the card transfer 
certificate 7506 and desaibing the data structure; a 
presentation card 12101 for an electronic telephone 
card to be transfen^ed; a card status 12102; a total 
remaining value 12103; a transfer offer number 12104; 
an acceptance number 12105; a public key certificate 
ID 12106 for the user public key certificate of user B; a 
public key certificate ID 12107 for the user public key 
certificate of user A; a card ID 12108; and an issued 
time 12109. which indicates the date on which the card 
transfer certificate 7606 was issued. These data are 
ck)sed and adc^essed to user B. thereby providing the 
card transfer certificate 7606. 

[20381 Upon receiving the card transfer certificate 
7606, tile mobile user terminal of user B deaypts it and 
examines the digital signature of user A and tfie one 
accompanying the electronic telephone card. Further, 
tiie mobile user t^minal conpares the card ID pre- 
sented by the card transfer offer 7601 witii the card ID 
12108, and conrpares the public key certificate IDs 
12106 and 12107 witii tiie public k^ certificates of 
users B and A to verify tiie contents of the card transfer 
certificate 7606. T>ie nnobile user terminal ttien gener- 
ates a card tiBnsfer receipt 7607, which is a message 
indicating tiie electronic telephone card has been 
received, and ft-ansmitB the receipt 7607 to the mobile 
user terminal of user A. 

[2039] As is shown in Fig. 121 B, tiie digital signature 
of user B is provided for the data that consist of a card 
transfer receipt header 121 15. which is header informa- 
tion indicating that the message is the card transfer 
receipt 7607 and describing tiie data ^cture; a card 
ID 121 16; a transfer offer numt>er 121 17; an acceptance 
number 121 18; a public key certificate ID 12119 for the 
user public key certificate of user A; a public key certifi- 
cate ID 12120 for the user public key certificate of user 
B; and an issued time 12121, which indicates the date 
on virhich the card transfer receipt 7607 was issued. 


These data are closed and addressed to user A, 
tiiereby providing tiie card transfer receipt 7607. 
[2040] Upon receiving tiie card transfer receipt 7607. 
tiie mobile user terminal of user A decrypts it, and 

5' examines the digital signature of user B. Furttier. tiie 
mobile user terminal compares the public key certificate 
IDs 121 19 and 12120 with tiie public key certificates of 
users B and A to verify the contents of the card transfer 
receipt 7607. The mobile user terminal then erases tiie 

TO transferred electronic telephone card from the card list 
1714, and registers the card transfer receipt 12122 in 
use history 1715. At tiiis time, addresses in tiie object 
data area at which the transfer offer number, the code 
information indicating tiie card transfer process, tiie 

15 issued time for tiie card transfer receipt 7607 and tiie 
card transfer receipt 12122 are stored are assigned to 
the request number 1840 in the use list 1715, the serv- 
ice code 1841, the use time 1842 and the use informa- 
tion address 1843. 

20 [2041 ] The mobile user terminal of user A displays, on 
the LCD. a message indicating tiie completion of tiie 
transfer process (display tiie transfer process; 7608). 
The process at the mobile user terminal of user A 
(sender) is thereafter terminated. 

25 [2042] After transmitting the card transfer receipt 
7607, the mobile user terminal of user B displays the 
received card transfer certificate 121 11 on the LCD. In 
addition, the mobile user terminal displays a dialogue 
message inquiring whetiier the transfer process with the 

30 service providing server (process for downloading tiie 
received electronic telephone card from the service pro- 
viding system) should be immediately performed (dis- 
play the transfer certificate; 7609). 
[2043] The dialogue message has two operating 

35 menus: "transfer process request" and "cancel." When 
"cancel" is selected, the transfer process performed 
with the service providing server is canceled, and in tiie 
process (data ipdating process) during which tiie serv- 
rce providing system updates the data in the mobile 

40 user terminal, an electronic telephone card tiiat has 
been transferred is assigned to the mobile user termi- 
nal. 

[2044] When user B selects "transfer process request" 
(transfer process request operation; 7610). based on 

45 tiie card transfer certificate 121 1 1 the mobile user ter- 
minal generates a card transfer request 7611. which is 
a message requesting tiiat tiie transfer process be per- 
formed with the service providing system, and transmits 
it to tiie service providing system via digital wireless tet- 

so ephone communication . 

[2045] As is Shown in Fig. 122 A, the digital signature 
of user B is provided for the data that consists of a card 
ti^ansfer request header 12200, which is header infor- 
mation indicating that the message is the card transfer 

55 request 7611 and desaibing the data structure; a 
decrypted card transfer certificate 12201 (12111); tiie 
user ID 12202 of user B; and an issued time 12203, 
which indicates tiie date when the card transfer request 
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761 1 was issued. These data are closed and addressed 
to the service provider, thereby providing the card trans- 
fer request 7611. 

[2046] Upon receiving the card transfer request 761 1 , 
the user processor of user B of the service providing 
system 1 10 decrypts it and examines the digital signa- 
ture, and transrr^ts it to the service manager processor. 
TTie service manager processor generates a service 
director processor to fam a process group for process- 
ing the card transfer request 12204. 
[2047] The service director processor, first refers to 
the user list 5200 and specifies the recipient (user B) 
and the sender (user A) of the transfer process by 
employing the public key certificate IDs 12106 and 
12107 in the card transfer certificate 12201 that Is 
included In the card transfer request 12204. The service 
director processor examines the digital signature of the 
user A and the digital signature accompanying the elec- 
tronic telephone card, which are provided for the card 
transfer certificate 12201 , and verifies the validity of the 
card transfer certificate 12201. Following this, the serv- 
ice director processor erases the electronic telephone 
card to be transferred from the card list 4612 of the user 
A that Is stored in the user information server 902. Then, 
the service director processor changes the card signa- 
ture private key and card signature public key pair and 
the card certificate for a new key pair and a card certifi- 
cate, and also changes the card status and the total 
remaining value to the card status 1 21 02 and to the total 
remaining value 12103 for the card transfer certificate 
12201. The service director processor generates an 
electronic telephone card received from user A. and 
errters it in the card list 4612 for the user B. 
[2048] When the electronic telephone card that is to 
be transferred has already been registered, the service 
director processor updates the registered card list 5502 
holding the electronic telephone card. Specifically, the 
user ID 5518. the user public key 5519, the registered 
card certificate address 5520, the telephone micro- 
check list address 5521 and the former user information 
address 5522, all of which are In the registered card list 
5502. are updated (to the information for user B). The 
old information (information for user A) is pointed to at 
the former user information address 5522 as former 
user Information 5523.. 

[2049] TTie service director processor generates a tel- 
ephone card transfer message 12226. which Includes 
an electronic telephone card transferred from user A. 
Ttie user processor of user B closes the message 
1 2226 and addresses It to the user B, and transmits rt as 
a telephone card transfer message 7612 to the mobile 
user terminal of user B via digital wireless telephone 
communication. 

[2050] As Is shown in Fig. 122C, the digital signature 
of the service pronder is provided for the data that con- 
sist of a t^ephone card transfer header 12219, which is 
header information incficating that the nf)essage is the 
card transfer 7612 and describing the data structure: a 


transfer number 12220. which is an arbitrarily generated 
number that represents the transfer process in the serv- 
ice providing system; transfer Information 12221; an 
acceptance number 12222; an electronic telephone 

5 .card-12223, which Is transferred; a service provider ID 
12224; and an issued time 12225. which indicates the 
date when the telephone card transfer message 7612 
was issued. These data are closed and addressed to 
the user B. thereby providing the card transfer message 

10 7612. 

[2051] The transfer information 12221 is information 
concerning the electronic telephone card transfer proc- 
ess performed by the service providing system, and Is 
acconrpanied by the digital signature of the service pro- 

15 vider. The mobile user ternrvnai of user B decrypts the 
received telephone card transfer message 7612 and 
examines the digital signature, regsters the electronic 
telephone card 12223 In the card list 1714. and dsptays 
the electronic telephone card on the LCD (display the 

20 electronic telephone card: 7613). The card transfer 
process is thereafter terminated. 
[2052] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the electronic telephone card Installation 

25 processing. 

[2053] In Rg. 79 are shown procedures for the 
exchange of messages by the devices during the elec- 
tronic telephone card installation processing, and in 
Figs. 127A and 127B. and 128A and 128B are shown 

30 the contents of messages that are exchanged during 
the electronic payment installation processing. 
[2054] First, when the user performs an electronic tel- 
ephone card installation operation 7900, the mobile 
user terminal generates an electronic telephone card 

35 installation request 7901 , and transmits it to the sennce 
providing system 110 via digital wireless telephone 
communication. 

[2055] As is shown in Fig. 127A. the digital signature 
of the user is provided for the data that consists of an 

40 electronic telephone card Installation request header 
12700. which Is header Information indicating that the 
message is the electronic telephone card Installation 
request 7901 and desaibes the data structure; an 
installation card number 12701 and an Installation 

45 number 12702. which are entered by a user; a request 
number 12703, which is an arbitrarily generated numk>er 
that uniquely represents the electronic telephone card 
installation process; a user ID 12704; and an issued 
time 12705, which indicates the date when the elec- 

50 tronic telephone card installation request 7901 was 
issued. These data are closed and addressed to the 
service provider, thereby providing the electronic tele- 
phone card Installation request 7901 . 
[2056] Upon receiving the electronic telephone card 

55 installation request 7901. the user processor of the 
service providing system 110 decrypts It and examines 
the digital signature, and transmits it to the service man- 
ager processor. The service manager processor gener- 
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ates a service director processor to form a process 
group for processing the electronic telephone card 
installation request 12706. 

[2057] First, the service director processor refers to 
-the installation card list that is indicated by the installa- s 
tion card list address 5243 for the telephone card issuer 
list 5205. and specifies a telephone card issuer who 
issues a telephone card that is represented by the 
installation nurnber 12701 . The service director proces- 
sor generates a telephone card Installation request io 
12717. which Is a message requesting that the tele- 
phone card Issuer issue a telephone card using the 
installation card. The telephone card Issuer processor 
closes the request 12717 and addresses it to the tele- 
phone card issuer, and transmits rt as a telephone card is 
Installation request 7902 to the telephone card Issuing 
system 108. 

[2058] As Is shown in Fig. 127B, tiie digital signature 
of the service provider Is provided Ibr the data that con- 
sist of a tel^shone card installation request header 20 
12710, which is header information indicating that tiie 
message Is the telephone card installation request 7902 
and desaibing tiie data structure; an installation card 
number 1271 1 ; an installation number 12712; a request 
number 12713; a customer number 12714. which 2s 
uniquely represents a user for the telephone card 
issuer; a service provider ID 12715; and an issued time 
12716. which indicates the date when tie telephone 
card Installation request 7902 was Issued. These data 
are closed and addressed to the telephone card issuer. 30 
thereby providing the telephone card installation 
request 7902. 

[2059] Upon receiving the telephone card installation 
request 7902. the telephone card issuing system 109 
decrypts it and examines the digital signature. TTie tele- 35 
phone card issuing server 1300 compares the Installa- 
tion card nurvtier 12711 and tiie installation number 
12712. which are included In the telephone card instal- 
lation request 7902, with the management information 
for ttie Issued electronic telephone card installation card 40 
that is stored in tiie telephone card Issuing information 
server 1302. The telephone card issuing server 1300 
then updates the data In the customer information 
server 1302 and the telephone card issuing information 
server 1303. Furtiiermore, the telephone card issuing 4S 
sender generates telephone card data (12806) for a 
requested telephone card, and transmits, to the service 
providing system, an electronic telephone card Installa- 
tion commission 7903, which is a message requesting 
tiie installation of an electronic telephone card that cor- so 
responds to the requested tel^one card. 
[2060] As is shown in Fig. 128A, the digital signature 
of the telephone card issuer is provided for the data that 
consists of an electronic telephone card Installation 
commission header 1 2800. which is header information ss 
indicating tiiat the message is tine electronic telephone 
card installation commission 7903 and descri)ing the 
data structure; a transaction number 12801 . which is an 


arbitrarily generated number that uniquely represents 
the transaction witii a user; telephone card issuing infor- 
mation 12802; a request number 12803; card code 
12804. which Indicates the type of electronic telephone 
card.that is to be issued; a template code 12805, which 
indicates a template program for an elecb-onic tele- 
phone card to be issued; telephone card data 12806; 
representative component information 12807; a tele- 
phone card Issuer ID 12808; and an issued time 12809, 
which Indicates the date when the electronic telephone 
card Installation commission 7903 was issued. These 
data are closed and addressed to the s&vice provider, 
tiiereby providing the electronic telephone card installa- 
tion commission 7903. 

[2061] The telephone card issuing information 12802 
Is Information concerning the telephone card issuing 
process performed by the telephone card issuing sys- 
tem, and is accompanied by tiie digital signature of tiie 
telephone card Issuer 

[2062] The telephone card data 12806 Is telephone 
card infonmation issued by the telephone card issuer, 
wherein the digital signature of the tel^hone card 
issuer accompanies tiie data that consists of the card ID 

12814. tiie telephone card information 12815 and ttie 
card ID 12816. 

[2063] The telephone card issuer processor of the 
service providing system deaypts the received elec- 
tronic telephone card installation commission 7903 and 
examines the cfigttal signature, and transmits the com- 
mission 7903 to the service director processor. In 
accordance with the electronic telephone card Installa- 
tion commission 12810, the service director processor 
generates an electi^onic telephone card to be issued to 
a user, using the same procedures as are used for the 
telephone card purchase processing, and also gener- 
ates an electronic telephone card installation message 

12815, which is a message directing that the electronic 
telephone card be installed In the mobile user terminal. 
The user processor closes the electi'onic telephone 
card installation message 12855 and addressees it to a 
user, and transmits It as an electronic telephone card 
Installation message 7904 to tiie mobile user terminal 
via digital wireless telephone communication. 

[2064] As is shown in Fig. 128B, the digital signature 
of the service provider is provided for the data tiiat con- 
sists of an electi'onic telephone card installation header 
12817. which is header information indicating tiiat tiie 
message is tiie electronic telephone card installation 
message 7904 and desaibing ttie data structure: a 
transaction number 12818; telephone card Issuing infor- 
mation 12819. which concerns the telephone card issu- 
ing process performed by ttie telephone card issuing 
system; telephone card Issuing information 12820, 
which concerns the telephone card issuing process per- 
formed by the service providing system; a request 
number 12821; generated electi'onic telephone card 
data 12822; a service provider ID 12823; and an issued 
time 12824, which Indicates the date when tiie elec- 
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tronic telephone card installation message 7904 was 
issued. These data are closed and addressed to the 
user, thereby providing the electronic telephone card 
installation message 7904. The telephone card issuing 
information 12819 and the telephone card issuing infor- 
mation 12820 are accompanied by the digital signatures 
of the telephone card issuer and the service provider 
[2065] The mobile user terminal deaypts the received 
electronic telephone card installation message 7904 
and examines the digital signature, registers, in the card 
list 1714. the electronic telephone card included in the 
electronic t^ephone card installation request 7904, and 
displays the installed electronic telephone card on the 
LCD (display the electronic telephone card; 7905). 
[2066] An explanation will now be given for the con- 
tents of messages that are exchanged by the devices 
during the real credit clearing process for electronic 
credit card service. 

[2067] tn Fig. 84 are shown procedures for the 
exchange of messages by the devices during the real 
aedrt clearing processing, and in Figs. 135A to 135F, 
ISBAto 136C. and 137A and 137B are shown the con- 
tents of the niessages that aire exchanged by the 
devices during the real credit clearing processing. 
[2068] Rrst when the merchant presses the switch on 
the cash register for the credit card cleahng (8401), the 
merchant terminal 102 or 103 generates multiple types 
of payment offer responses 8406 and enters the wart 
state for a paynrient offer 8405. 
[2069] The payment offer responses 8406 are those 
used when an amount of payment entered by a user is 
insufficient, when a credit card or a payment option des- 
ignated by the user is not available, or when the pay- 
ment offer 8405 is accepted. 

[2070] When the user performs a payment operation 
8404. the mobile user terrr^nal 100 generates the pay- 
ment offer 8405 and transits it to the merchant terminal 
102 or 103 via infrared communication. 
[2071] As is shown in Fig. 135A, the digital signature 
of a user is provided for data that consists of a payment 
offer header 13500. which is header information indicat- 
ing that the message is the payment offer 8405 and 
describing the data structure; a payment service code 
13501. which is a service code used to identify the type 
of electronic credit card designated by a user; a request 
number 13502. which is an art)itrarily generated number 
that uniquely represents the transaction with a mer- 
chant; an amount of payment 13504, which is entered 
by a user; a payment option code 1 3505. which is a pay- 
ment option, such as the number of payments, entered 
by a user; an effective period 13506 for the payment 
offer 8405; and an Issued time 13507, which indicates 
the date on which the payment offer 8405 was issued. 
Thus, the payment offer 8405 is provided. 
[2072] Upon receiving the payment offer 8405, the 
merchant terminal 102 or 103 examines the payment 
sennce code 13501 . the amount of payment 13504 and 
the payment option 13505, and selects an appropriate 


payment offer response 8406 from anx>ng n^ltiple 
types of responses 8406 and transmits it to tiie mobile 
user terminal via infrared communication. Further, the 
terminal 102 or 103 generates an authorization request 

5 8409 and transmits it to the merchant processor of the 
service providing system 110. 
[2073] As is shown in Fig. 135B, the digital signature 
of a merchant is provided for the data that consists of a 
payment offer response header 13508, which is header 

10 information indicating that the message is the payment 
offer response 8406 and describing the data structure; a 
response message 13509. which is displayed on the 
LCD 303 when the mobile user terminal 100 receives 
the payment offer response 8406; a transaction numt>er 

IS 13510, which is an arbitrarily generated numt)er that 
uniquely represents the transaction with a user; an 
amount of sales 13511; a service provider telephone 
number 13512, which is tiie telephone numt>er of the 
service providing system in the service area of the mer- 

20 chant; an effective period 13513 for the payment offer 
response 8406; a merchant ID 13514; and an issued 
time 13515, which indicates the date on which the pay- 
ment offer response 8406 was issued. In this fashion, 
the payment offer response 8406 is provided. 

2S [2074] The service provider telephone number 1 351 2 
is accompanied by the digital signature of the service 
provider. The response message 13509 is a text mes- 
sage that is optionally selected by the merchant, and 
may not always be selected. 

30 [2075] When the amount of payment designated by 
the user is insufficient or when a credit card or a pay- 
ment option entered by the user can not be accepted, 
the merchant terminal sets for the transaction nunrfoer 
13510 a value of t)," thus notifying the nwbile user ter- 

35 minal that the payment offer 8405 can not be accepted. 
[2076] As is shown in Fig. 135C, the digital signature 
of a merchant is provided for the data that consists of an 
authorizatfon request header 13516. which is header 
information indicating that the message is the authori- 

40 zation request 8409 and describing the data structure; a 
payment offer 8405; a payment offer response 8406: an 
accounting machine ID 13517; a merchant ID 13518; 
and an issued time 13519, which indicates the date on 
which the authorization request 8409 was issued. 

4s These data are closed and addressed to the service 
provider, thereby providing the autiiorization request 
8409. 

[2077] The nK)bile user terminal 1 00 receives the pay- 
ment offer response 8406, compares the amount of 

so payment 13504 with the amount of sale 1351 1, gener- 
ates a payment request 8410, and transmits it to tiie 
user processor of the service providing system via dig- 
ital wireless telephone communicatfon. 
[2078] As is shown in Fig. 135D, the digital signature 

55 of a user is provided for the data that consists of a pay- 
ment request header 13524, which is header informa- 
tion indicating that the message is the payment request 
8410 and desaibing the data structure; a payment offer 
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8405; a payment offer response 8406; a user ID 13525; 
and an issued time 13526, which indicates the date on 
which the payment request 8410 was issued. These 
data are closed and addressed to the service provider, 

- thereby providing the payment request 8410. 

[2079] Either the transmission of the authorization 
request 8409 by the merchant terminal 102 or 103. or 
the transmission of the payment request 8410 by the 
mobile user terminal may be performed first or the two 
of them may be performed at the same time. 
[2080] The merchant processor and the user proces- 
sor of the senfice providing system 110 receive the 
authorization request 8409 and the payment request 
8410, decrypt them and examine the digital signatures, 
and transmit an authorization request 13520 and a pay- 
ment request 13527 to the service manager processor. 
The service manager processor conpares the request 
number, the transaction number and the merchant 10 to 
obtain a correlation between the authorization request 
and the payment request, and generates the service 
director processor to form a process group for handling 
the authorization request 13520 and the payment 
request 13527. The service director processor com- 
pares the contents of the authorization request 13520 
with those of the payment request 13527, authorizes 
the user and generates an authorization response 
13540. The merchant processor closes the response 
13540. addresses It to the n)erchant and transmits it as 
an authorization response 841 1 to the merchant termi- 
nal. 

[2081] As is shown in Fig. 135E, the digital signature 
of a service provider is provided for the data that con- 
sists of an authorization response header 13531 . which 
is header information Indicating that the message is the 
authorization resporse 8411 and describing the data 
structure; a transaction number 13532; an authorization 
number 13533, which is an arbitrarily generated number 
that uniquely represents the authorization processing; 
user personal data 13535; a customer number 13536; 
an effective period 13537, which designates a period 
during which the authorization response 841 1 is effec- 
tive; a service provider ID 13538; and an issued time 
13539, which indicates the date on which the authoriza- 
tion response 8404 was issued. These data are closed 
and addressed to the merchant, thereby providing the 
authorization response 841 1 . 
[2082] When, as the result of the authorization proc- 
ess, it is determined that the aedit condition of the user 
is not satisfactory, the user personal data 13534 are not 
set. The customer number 13536 is set only when a 
transaction was previously made between the user and 
the merchant through an electronic convnerce service. 
[2083] The merchant ternvnal 1 02 or 1 03 decrypts the 
received authorization response 8411 and examines 
the digital signature, and displays the results of the 
authorization process on the LCD. 
[2084] When an operator (merchant) performs a clear- 
ing request operation 8413. the merchant terminal gen- 


erates a clearing request 8415 and transmits it to tiie 
merchant processor. As is shown in Rg. 135F. the digital 
signature of a merchant is provided for the data that 
consist of a clearing request header 13544, which is 

•5 ~ header information indicating that tiie message is ttie 
clearing request 8415 and describing the data structure; 
a payment offer 8405; a payment offer response 8406; 
an authorization numt)er 13545, which is issued by the 
service providing system 110; an effective period 

10 13546, which indicates a period during which the clear- 
ing request 8415 is effective; an accounting machine ID 
13547; a merchant ID 13548; and an issued time 
13549. which indicates the date on which the clearing 
request 8415 was issued. These data are closed and 

15 addressed to the service provider, thereby providing the 
clearing request 8415. 

[2085] Upon receiving the clearing request 8415, thie 
merchant processor of the service providing system 
110 deaypts it arKi examines the digital signature, and 
20 transmits a clearing request 8450 to the service director 
processor. The service director processor compares the 
clearing request 8450 with the payment request 8427. 
and generates a clearing request 13610 for the transac- 
tion processor. The transaction processor processor 
26 closes the request 13610. addresses it to the transac- 
tion processor, and transmits it as a clearing request 
8416 to the trarrsaction processing system. 
[2086] As is shown in Rg. 136A. the digital signature 
of a service provider is provided for data that consist of 
30 a clearing request header 1 3600. which is header infor- 
mation indicating that the message is the clearing 
request 8416 and desaibing the data structure; a user 
clearing account 13601, which indicates a credit card 
that corresponds to tiie payment service code desig- 
ns nated by tiie user; a request nunrtser 13602, which is 
issued by the mobile user ternrvnal 100; an amount of 
p^ment 13603; a payment option code 13604; a mer- 
chant clearing account 13605, which indicates a clear- 
ing account for the merchant; a transaction number 
40 13606. which is issued by the merchant terminal; an 
effective period 13607, which indicates tfie period 
wherein the clearing request 8416 is effective; a service 
provider ID 13608; and an issued time 13609, which 
indicates the date on which tiie clearing request 8416 
45 was issued. These data are closed and addressed to 
tiie transaction processor, tiiereby providing tiie clear- 
ing request 8416. 

[2087] The transaction processing system 106 
receives the clearing request 8416. deaypts it and 

so examines tiie digital signature, and performs the clear- 
ing process. Then, the transaction processing system 
106 generates a clearing conpletion notification 8417 
and transmits it to the service providing system 110. 
[2088] As is shown in Fig. 136B, the digital signature 

55 of a transaction processor is provided for data that con- 
sist of a clearing completion notification header 13614, 
which is header information indicating tiiatthe message 
is the clearing completion notrf icatton 841 7 and describ- 
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ing the data structure; a clearing number 13615. which 
is an arbitrarily generated nunit>er that uniquely repre- 
sents the clearing prcx:ess performed by the transaction 
processing system 106; a user clearing account 13616; 
a request number 1 361 7ran amount of payment 13618; s 
a payment option code 13619; a merchant clearing 
account 13620; a transaction number 13621; clearing 
information 13622 for a service provider that is accom- 
panied by the digital signature of the transaction proces- 
sor; clearing information 13623 for a merchant that is io 
accompanied by the digital signature of the transaction 
processor; clearing information 13624 for a user that is 
accompanied by the digital signature of the transaction 
processor; a transaction processor provider ID 13625; 
and an issued time 13626, which indicates the date on 75 
which the clearing completion notrfication was issued. 
These data are closed ar>d addressed to the service 
provider, thereby providing the clearing completion noti- 
fication 8417. 

[2069] Upon receiving the clearing completion notifi- 20 
cation 841 7. the transaction processor processor of the 
service providing system 1 10 decrypts it and examines 
the digital signature, and transmits a clearing comple- 
tion notification 13627 to the service director processor. 
Upon receiving the clearing completion notification 25 
13627, the service director processor generates a 
clearing completion notification 13637 for the merchant 
The merchant processor closes the clearing completion 
notification 13637. addresses it to the merchant, and 
transmits ft to the merchant terminal as a clearing com- 30 
pietfon notification 8418 for the merchant. 
[2090] As is shown in Fig. 136C, the digital signature 
of a service provider is provided for data that consist of 
a clearing completion notification header 13631, which 
is header information indicating that the message is the 35 
clearing completion notification 8418 and descrit»ng the 
data structure; a clearing numt>er 13632; clearing infor- 
mation 13623 for a merchant that is accompanied by the 
digital signature of the transaction processor; a cus- 
tomer number 13633. which is an art>itrarily generated 40 
number that uniquely represents a user for a merchant; 
a decrypted clearing request 13550; provided service 
information 13634. which concerns the process per- 
formed by the service providing system 1 10; a service 
provider ID 13635; and an issued time 13636, which 4S 
indicates the date on which the clearing completion 
notification 8418 was issued. These data are closed 
and addressed to the merchant, thereby providing the 
clearing completion notification 8418. TTie provided 
sendee information 13634 is set optionally by the serv- so 
ice provider, and may not always be set. 
[2091] Upon receiving the clearing completion notifi- 
cation 8418. the merchant terminal decrypts it and 
examines the digtal signature, and generates a receipt 
841 9 and transmits it to the merchant processor 55 
[2Q92] As is shown in Fig. 137 A. the digital signature 
of a merchant is provided for data that consist of a 
receipt header 13700. which is header infonnation indi- 


cating tiiat the message is the receipt 841 9 and desait>- 
ing the data structure; an item name 13701. which 
indicates a product that is sold: sales inforn^tion 
13702, which is additional information concerning the 
transaction transmitted by the merchant to the user; a 
clearing number 13703; transaction information 13704; 
a payment offer 8405; an accounting machine ID 13705; 
a merchant ID 13706; and an issued time 13707. which 
indicates the date on which the receipt 8419 was 
issued. These data are closed and addressed to the 
service provider, thereby providing the receipt 8419. 
The sales information 13702 is set optionally by the 
merchant, and may not always be set. 
[2093] Upon receiving the receipt 841 9, the merchant 
processor of the service providing system 110 deaypts 
it and examines the digital signature, and transmits a 
receipt 13708 to the service director processor. The 
service director processor empfoys the receipt 13708 to 
generate a receipt 1 371 7 for a user. The service director 
processor closes the receipt 13717 and addresses it to 
the user, and transmits it as a receipt 8421 to the mobWe 
user terminal 100 via digital wireless telephone commu- 
nication. 

[2094] As is shown in Fig. 137B. tfie digital signature 
of a sen^ice provider is provided for data that consist of 
a receipt header 13712. which is header information 
indicating that the message is the receipt 8421 and 
descrbing tiie data structi^e; a user ID 13713; a 
decrypted receipt 13708; clearing infomnation 13709 for 
a user that is accompanied by the dgital signature of 
the transaction processor; provided savice information 
13714, which concerns the process performed by the 
service providing system 110; a service provider ID 
13715; and an issued time 13716. which indicates the 
date on which the receipt 8421 was issued. These data 
are closed and addressed to the user. theret>y providing 
the receipt 8421. The provided service information 
13713 is set optionally by the service provider, an6 may 
not always be set. 

[2095] Upon receiving the recept 8421, the mobile 
user terminal 100 decrypts it and examines the digital 
signature, and displays the contents on the LCD 303. 
The real credit clearing process is thereafter termi- 
nated. 

[2096] In the mobile user terminal 100. the ROM 1501 
and the EEPROM 1503 may be replaced by fenroelec- 
trie nonvolatile menwry as a memory device for storing 
a program executed by the CPU 1500 and the public key 
of the service provider. This menxiry device can store 
data without a battery being required, while like EEP- 
ROM a flash memory, data can be written to it. In addi- 
tion, the reading and writing speeds of the ferroelectric 
nonvolatile memory are higher than those of EEPROM 
and flash memory, and the power consumption is low. 
[2097] When the ferroelectric nonvolatile memory is 
employed instead of the ROM 1501 and the EEPROM 
1503. in ti)e same manner, for example, as in the data 
updating process, the program for the mobile use- ter- 
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mtnal 100 can be extensively updated, and the putslic 
key of the service provider can be pertodicaliy updated 
within a comparatively short period of time with Itttie bat- 
tery service life loss. 

[2098] furthermore, a ferroelectric nonvolatile mem* s 
ory may be used as the RAM 1 502 to store the data that 
are to be processed and the data that are processed by 
the CPU 1500. Since data are not lost even when the 
battery power has been exhausted, a data backup proc- 
ess is not required, and the power supply required for io 
storing the data resident In the RAM is not needed. As a 
result the power consumed by the mobile user terminal 
can be reduced. 

[2099] Also, a ferroelectric nonvolatile memory may 
used instead of the ROM 3001 and the EEPROM 3003 is 
in the merchant terminal 103, or the RAM 3002. In this 
case, the same effects are acquired as are obtained 
with the mobile user terminal 100. 
[2100] In the above explanation, the mobile user ter- 
minal 100. the gate terminal 101 and the merchant ter- so 
minals 102 and 103. which together constitute the 
mobile electronk: commerce system, include an optimal 
hardware an^gement with which to implement the 
individual functions needed to provide the mobile elec- 
tronic commerce service. TTiese components can be ss 
constituted by a wireless telephone communication 
function, an infrared oommunk^ation function, and a 
computer that comprises a display device, a keyboard 
(or an input pen), a mk:rophone and a loudspeaker, and 
that further comprises a bar code reader for the mer- 30 
chant terminal 103. 

[2101] In this case, functionally corresponding hard- 
ware components of the mobile user terminal 100. the 
gate terminal 101. or the merchant terminal 102 or 103 
are modified for inclusion in a program for the hardware 35 
components tiiat are not included in the conputer (e.g., 
a data codec, a cryptographic processor and a logic 
conti-ol unit). This program, together with a program 
stored In the ROM 1501 (or 2201 . 2601 or 3001). is con- 
verted so tiiat it can be operated by tiie OS (Operating 40 
System) of a personal computer. The resultant program 
is tiien stored at a location (e.g.. on a hard disk) where 
it can be accessed t}y tfie computer. 
[2102] A second emtxxiiment of the present invention 
will now be de8ait>ed while refen'ing to Figs. 139 arxi 45 
140. 

[2103] in tiie mobile electronic commerce system in 
ttie second embodiment, instead of the EEPROM 1503 
an SIM (Subsaiber klentify Module) card is employed 
tor ttie mobile user terminal 100 in tiie first embodiment, so 
[2104] Figs. 139A and 139B are a front view and a 
rear view of a mobile user terminal 1 3900 for tiie second 
embodiment, and Fig, 140 Is a block diagram illustrating 
ttie arrangement of tiie mobile user terminal 13900. The 
arrangement of tiie mobile user terminal 13900 is tiie ss 
same as that of ttie mobile user terminal 100. except 
ttiat an SIM card 14000 and an SIM card readeryWriter 
14001 are provkJed instead of ttie EEPROM 1503. The 


external appearance of the rrtcbWe user terminal 13900 
is also tiie same as tiiat of the mobile user terminal 1 00. 
except tiiat an SIM card attachment section 13901 is 
provided on the reverse side for attaching the SIM card 
14000. 

[2105] The same information as is stored in tiie EEP- 
ROM 1503 in the first embodiment is stored in the non- 
volatile memory of the SIM card 149000: ttie tern^nal ID 
and ttie telephone number of tiie mobile user ternrtinal 
13900 when used as a wireless telephone terminal; a 
user ID; a user code number; a private key and a publk: 
key used for a digital signature; a service provider ID; 
tiie telephone number of the servk:e provkJing system 
110 (whk:h is accompanied by the digital signature of 
the service provder); and the public key of the servk:e 
provider. 

[21 06] The SIM card 1 4000 can be carried separately 
from tiie nnobile user terminal 13900. But without the 
SIM card 14000. if it has been removed, ttie nnobile user 
terminal 13900 can not be operated. When the SIM 
card 14000 is attached to the SIM card reader/writer 
14001 . ttie CPU 1500 of ttie mobile user temitnal 13900 
accesses tiie information staed on ttie SIM card 14000 
via the SIM card reader/writer 14001 and a txjs 1529. 
The mobile user terminal 13900 then periorms tiie 
same operations as does ttie mobile user terminal 100 
in the first embodiment. 

[2107] Furtiier, to remove ttie SIM card 14000 from 
the mobile user terminal 13900, the following operation 
must t>e performed. 

[21 08] First, when a user depresses tiie power switch 
and holds it down for five seconds (removal operatfon 1 
for ttie SIM card 1 4000). ttie mobile user terminal 1 3900 
displays, on the LCD 303, a dialogue message request- 
ing confirmation that the SIM card will be renrxTved. 
Then, when the user depresses the execution switch 
(removal operation 2 for tiie SIM card 14000), tiie 
mobile user terminal 13900 performs a data updating 
process with tiie service providing system 110, and 
uploads ttie data from tiie RAM 1502 of ttie nnobile user 
temninal 13900 to the user information sen/er 902. 
When the user removes the SIM card 14000 from ttie 
SIM card reader/writer 14001 (removal operation 3 for 
tiie SIM card 14000), tiie mobile user terminal 13900 
deletes all ttie data hekJ in the RAM 1502. 
[2109] Specif icalty, when the SIM card is removed 
from the mobile user terminal, the data, such as those 
for the electronic ticket and electronic payment card, 
tiiat are stored in the RAM of ttie mobile user terminal 
are uploaded fo the user information server 902 of tiie 
servtee provkJing system 110. 
[21 1 0] The following operation is performed when the 
SIM card 14000 is attached to the mobile user terminal 
13900. 

(2111] When tiie SIM card 1 4000 is connected to tiie 
SIM card reader/writer 14001. the mobile user terminal 
13900 displays, on tiie LCD 303. a screen whk^h per- 
mits the entry of a code number. When the user enters 
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the code number and presses the execution switch, the 
code numt}er stored in the nonvolatile mennory of the 
SIM card 14000 is connpared with the code number that 
was entered. When the two numbers do not match, the 
. nxibile user terminal13900.agatn displays on the LCD 5 
303 which permits the entry of the code number. When 
the two code numbers match, access to the SIM card 
14000 is permitted. The mobile user tenminal 13900 
reads, from the SIM card 14000, the user ID, the private 
key used for the digital signature, the telephone number 10 
of the service providing system 1 10 and the public key 
of the service provider, and performs a data updating 
process with the service providing system 1 10 in order 
to update the data in the RAM 1502 of the mdbWe user 
terminal 13900. At this time, the data tor the mobile user 75 
terminal in the user informatton server 902 are stored in 
the RAM 1502 of the nxjbile user terminal 13900, in 
accordance with the user ID stored on the SIM card 
14000. 

[21 1 2] Specifically, the data for the mobile user ter mi- 20 
nal, such as the data for the electronic ticket or for the 
electronic payment card that are uploaded to the user 
information sender 902 of the sevice providing system 
110, are downloaded to the mobile user terminal to 
which the SIM card is attached. When, for example, an 25 
SIM card is attached to a mobile user terminal that dif- 
fers from the mobile user terminal to which the SIM card 
was previously attached, the same data as those stored 
in the RAM of the mobile user terminal to which the SIM 
card was previously attached are stored in the RAM of 30 
the nrxibile user temrdnal to which the SIM card is cur- 
rently attached. 

[2113] Therefore, the user can carry the SIM card 
14000 on which the user ID is stored, and can employ 
an arbitrary mobile user terminal as his or her own by 3S 
attacNng the SIM card to that mobile user terminal. 
[2114] In the mobile user terminal 13900, notonlythe 
areas used for storing the user ID and the code number, 
but also areas that con^espond to the basic program 
area 1700 of the RAM 1502. the service data area 4o 
1 701 . the user area 1 702 and the temporary area 1 704 
may be provided for the nonvolatile memory of the SIM 
card 1 4000, so that the data stored in these areas in the 
RAM 1502 may be stored in the nonvolatile memory of 
the SIM card 14000. In this case, the data for the dec- 4s 
tronic ticket or the electronic payment card are stored in 
the nonvolatile memory of the SIM card 14000, and the 
RAM 1502 is a work area that is used by the CPU 1500 
when executing a program. 

[21 1 5] Since the data stored in the RAM 1 502, other so 
than in the work area 1703 of the mobile user terminal 
100 of the first embodiment, are held in the nonvolatile 
menfKxy of the SIM card 14000, the data updating proc- 
ess, which is performed when the SIM card Is attached 
and removed, is not required, and as a power source for 55 
holding data Is also not required, the power consumed 
by the mobile user terminal can be reduced. 
[2116] A ferroelectric memay may be used as the 


nonvolatile memory for the SIM card 14000. Since the 
reading and writing speeds of the ferroelectric nonvola- 
tile memory are higher than are those of EEPROM and 
flash memory, and since the power consumption is low, 
the processing speed of the mobile user terminal can be 
increased and its power consunption can be reduced. 
[2117] A third embodiment will now be described white 
referring to Figs. 141 to 143. 

[2118] According to the third emboc£ment, a mobile 
electronic commerce system is provided that includes 
an IC card reader/writer and that employs, as a mobile 
user terminal, a portable wireless telephone terminal 
wherein an electronic ticket an electronic payment card 
or an electronic telephone card that the user obtains is 
stored in an IC card loaded into the telephone terminal 
[2119] Figs 141A and 141B are a front view and a 
rear view of a mobile user terminal 14100 according to 
the third embodiment and Fig. 142 is a block diagram 
illustrating the arrangement of the mobile user terminal 
14100. The external appearance of the mobile user ter- 
minal 13900 is the same as that of the mobile user ter- 
minal 100. except that an IC card insertion sfot 14101 is 
formed in the reverse side for loading the IC card 14100. 
The arrangement of the mobile user terminal 14100 is 
the same as that of the mobile user terminal 1 00. except 
that the cryptographic processa 1505 is replaced by an 
IC card readeryWriter 14200. When the IC card 14102 is 
loaded into the IC card reader/writer 14200. the mobile 
user terminal 14100 performs the same operations as 
does the mobile user terminal 100 in the first embodi- 
ment for the other devices, such as the service provid- 
ing system 110, the gate terminal 101, the merchant 
terminals 102 and 103, the automatic vending machine 
104 and the switching center 105. 
[21 20] It should be noted that the mobile user terminal 
14100 performs the following operation when the IC 
card 14102 is loaded therein. 
[2121] When the IC card 14102 is loaded in the IC 
card reader/writer 14200. the mobile user terminal 
14100 displays, on the LCD 303, a screen pern^ing 
the entry of a code number. When the user enters the 
code nunt)er and presses the execution switch, the 
code number stored in the IC card 14102 is compared 
with the code number that was entered. When the two 
numbers do not match, the mobile user terminal 14100 
again displays, on the LCD 303, the screen permitting 
the entry of a code number. When the two code num- 
bers match, access to the IC card 14102 is permitted. 
[2122] For the mobile user terminal 14100, the user ID 
and the user code number, the private key and the pub- 
lic key used for a digital signature, the service provider 
ID, the telephone number of the service providng sys- 
tem 1 10 and the putsiic key of the service provider are 
stored in the IC card 14102, while the tenminal ID and 
the telephone number of the mot>ile user terminal 
14100 when used as a wireless telephone terminal are 
stored In the EEPROM 1503. 
[21 23] In addition, an additional program and the data 
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for the electronic ticket or the electronic payment card, 
which are stored in the basic program area 1700. the 
sen/ice data area 1701, the user area 1702 and the 
temporary area 1704 in the RAM 1502 of the mobile 
user terminal 1 00 of the first embodimerrt, are stored on 5 
the IC card 14102 of the mobile user terminal 14100. 
The RAM 1502 of the mobile user terminal 14100 
senses as a work area that is used by the CPU 1500 
when executing a program. 

[2124] FurthernrK)r6. the mobile user tenninal 14100 10 
employs the IC card 14100 loaded irrto the IC card 
reader/writer 14200 to perform one part of the data 
processing fa the messages that are exchanged with 
the service providing system 1 10, the gate terminal 101 , 
the merchant terminals 102 and 103. the automatic is 
vending machine 104 or the switching center 105 for the 
mobile electronic commerce service. 
[2125] Fig. 143 is a block diagram illustrating the 
arrangement of the IC card 14102. 
[2126] The IC card 14102 includes two interfaces, one so 
for a contact type IC card and one for a non-oontact IC 
card. This IC card comprises: a CPU (Central Process- 
ing Unit) 14300. which processes data to be transmitted 
and data that are received in accordance with a pro- 
gram stored in a ROM (Read Only Memory) 14301 . and 2s 
which controls the other componerrts across a bus 
14318; a RAM (Random Access Memory) 14302, in 
which are stored data that are to be processed and that 
are being processed by the CPU 14300; an FeRAM 
(Ferroelectric Random Access Memory) 14303, in so 
which are stored a user ID and a code number for a 
user, a private key and a public key for a digital sig^a- 
ture, a service provider ID, the telephone nunr^r of the 
service providing system 1 10, the public key of the serv- 
ice provKler. and an additional program or data such as 35 
those for an electronic ticket or for an electronic pay- 
ment card, which are stored in the basic program area 
1700, the service data area 1701. the user area 1702 
and the temporary area 1704 of the RAM 1502 for the 
first emkxxjiment; a cryptographic processor 14304, 40 
which encrypts or decrypts data under the control of the 
CPU 14300; an input/output circuit 14305. which con- 
verts and controls a signal that is input or output at a 
contact 14306 of a non-contact IC card under the con- 
trol of the CPU 14300; and an RF nrxxJem 14307. whk;h 45 
converts and controls radio waves that are irqaut or out- 
put by an antenna 14308 of a non-contact IC card under 
the control of the CPU 14300. 
[21 27] The cryptographic processor 1 4304. which cor- 
responds to the CTyptographic processor 1505 of the so 
mobile user terminal 100 in the first entoodiment, 
includes an ©icryption and decryption function that 
uses a secret key method and an encryption and 
decryption function for a public key system. The crypto* 
grapNc processor 14304 employs the cryptograph 55 
method and keys that are set by the CPU 14300 to 
encrypt or decrypt data as designated by the CPU 
14300. The cryptographic function of the cryptographic 


processor 14304 is employed for the process for provid- 
ing a digital signature for a message or the process for 
closing the message, and the process for decrypting the 
closed message or the process for verifying a digital sig- 
nature accornpanying the message. 
[2128] To transmit via a digital wireless telephone 
communication, a message that is closed and is accom- 
panied by a cfigital signature, first, the CPU 14300 
enploys the cryptographic processor 14304 to perform 
the digital signature provision process and the message 
dosing process, and transmits the resultant message to 
the input/output circuit 14305. The message, which is 
closed and is accompanied by the digital signature, is 
converted into an electric signal by the input/output cir- 
cuit 14305. and the electric signal is output at the con- 
tact point 14306. Through the IC card reader/writer 
14200 and the bus 1529, the CPU 1500 reads, as a 
message, the electric signal that is output at the contact 
14306. The CPU 14300 employs the data codec 1506 
to encode the message that is closed and accompanied 
by the digital signature to obtain a data form for digital 
wireless telephone communication, and transmits the 
coded message via the control logic unit 1508 to the 
channel codec 1513. 

[21 29] When a message that is closed and is accom- 
panied by a digital signature is received via digital wire- 
less telephone communication, the CPU 1 500 reads the 
received message from the channel codec 1513 
through the control logic unit 1508, employs the data 
codec 1506 to decrypt the received message, and 
transmits the decrypted message to the IC card 14102 
via the bus 1529 and the IC card reader/writer 14200. 
The CPU 14300 receives a nr>essage via the contact 
poim 14306 and the Input/output circuit 14305. and 
employs the cryptographic processa 14304 to decrypt 
the closed and encrypted message and to examine the 
digital signature accompanying the message. 
[2130] Similariy. to trartsmit via infrared communica- 
tion a message that is closed and is accompanied by a 
digital signature, first, the CPU 14300 employs the ayp- 
tographic processor 14304 to perform the digital signa- 
ture provision process and the message closing 
process, and transmits the resultant message to the 
input/output circuit 14305. The message that is closed 
and is accompanied by the digital signature is converted 
into an electric signal by the input/output circuit 14305. 
and the electric signal is output at the contact point 
14306. Through the IC card reader/writer 14200 and the 
bus 1529. the CPU 1500 reads, as a message, the elec- 
tric signal that is output at the contact 14306. The CPU 
14300 employs the data codec 1506 to encode the 
message that is closed and is accompanied by the dig- 
ital signature to obtain a data form for infrared commu- 
nication, and transmits the coded message to the 
infrared communication module 1507. 
[2131] When a message that is closed and is accom- 
panied by a digital signature is received via infrared 
communication, the CPU 1500 reads the received mes- 
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sage from the infrared communication module 1507. 
employs the data codec 1506 to decrypt the received 
message, and transmits the deaypted message to the 
IC card 14102 via the bus 1529 and the IC card 
readerAwriter 14200. The CPU 14300 receives a mes- 5 
sage via the contact point 14306 and the input/output 
circuit 14305, and employs the ayptographic processor 
14304 to decrypt the closed and encrypted message 
and to examine the digital signature accompanying the 
message. 70 
[2132] In Rg. 144 is shown a memory map for the 
FeRAM 14303. The FeRAM 14303 includes five areas: 
a security area 14400, a basic program area 14401, a 
service data area 14402. a user area 14403 and a tem- 
porary area 14403. The security area 14400 is used to 15 
store a user ID, a user code number, a private key and 
a pM\c key for a digital signature, a service provider ID, 
the telephone number of the service providing system 
(that is accompanied by the digital signature of the serv- 
ice provider), and the public key of the servkie provider. 20 
The basic program area 14401. the service data area 
14402. the user area 14403 and the temporary area 
14404 coaespond to the basic program area 1700. the 
sen/ice data area 1701. the user area 1702 and the 
temporary area 1704 in the RAM 1502 of the mobile 2s 
user terminal 100 lor the first embodiment, and the 
same data are stored in these areas as are stored in the 
first embodiment. That is. all the information used for the 
mobile electronic connmerce service, such as the user 
ID, the keys for the digital signature, or the electronic 30 
ticket or the electronic payment card that the user 
obtained, are stored on the IC card 14102. 
[2133] Therefore, the user can carry the IC card 
14102 in which the user ID is stored, and can perform 
the electronic commerce service function, while using 35 
an art>itrary mobile user terminal that is regarded as Ns 
or her own. by loading the IC card 14102 into that 
n>obile user terminal. 

[2134] In addition, since the mobile user terminal 
14100 can not access the IC card 14102 when it is not 40 
loaded, the mobile user terminal 14100 can not process 
message data obtained through the mobile electronic 
commerce service. Therefore, in this case, the mobile 
electronic oonmerce service function of the mobile user 
terminal 100 can not be employed, and only the digital 4s 
wireless telephone function can be used. 
[2135] In Fig. 141C is shown the saeen that is dis- 
played on the LCD 303 in the digital wireless telephone 
nrode when the IC card 14102 is not baded, and in Fig. 
1 41 D is shown the screen that is displayed on the LCD so 
303 in the credit card mode when the IC card 14102 is 
loaded. 

INDUSTRIAL USABILITY 

55 

[2136] As is apparent from the above description, the 
mobile electronic commerce system according to the 
present invention can download to the electronic wallet 


an electronic negotiable card, such as a payment card, 
a telephone card or a ticket, through the communication 
means, and can easily obtain such a card. When the 
electronic payment card, the electronic telephone card 
-or the electronic ticket is to. be used, the settlement 
process or the examination process is quickly and pre- 
cisely performed, so that safety and usability for a busi- 
ness transaction can be provided. 
[21 37] The performance of an illegal activity during a 
business transaction can be prevented, and the secrecy 
of personal information can be maintained. 
[21 38] The electronic payment card, the electronic tel- 
ephone card and the electronic ticket can be delivered 
along a distribution route as a form of printed matter or 
as a recording medium, and wide distribution if possl}le. 
[2139] In addition, the usability in the mot>ile environ- 
ment can be improved, and, particularly in the invention 
dted in claims 24 and 25, a system appropriate to the 
environment in which it is to be used can be obtained. 
[2140] According to the invention cited in claim 27, 
cash is not required to purchase a product from an auto- 
matic vending machine, and the usability can be 
inproved. 

[2141] According to the invention cited in claim 28. the 
operator is able to manipulate the electronic payment 
card clearing means and to present to a person in 
charge, the data stored in the electronic payment card 
clearing means. Thus, the usability of the electronic 
payment card clearing means is improved. 
[2142] According to the invention cited in claim 30, 
since the calculation of the price of a product and the 
settlement process can be preformed, the usability is 
improved. 

[2143] According to the invention cited in claim 31, 
since the process beginning with the promotion of a 
product an continuing until the product is sold is auto- 
mated, the usability is improved. 
[2144] According to the invention cited in claim 32. the 
provision of a communication service and the collectwn 
of a communication charge for that service can be per- 
formed at the same time, and the collection rate for the 
communication charge can be improved. 
[2145] According to the invention cited in claim 33, the 
operator is able to operate the electronic ticket means 
and to present to a person in charge, the data stored in 
the electronic ticket means. Thus, the usability of the 
electronic ticket means is improved. 
[2146] According to the invention cited in clam 34, the 
service providing means can efficiently manage the 
electronic wallet and the electronic payment card clear- 
ing means, and can provide the electronic payment card 
sen/Ice, the electronic telephone card service and the 
electronic tk;ket service. 

[2147] According to the invention cited in claim 35. the 
settlement means can efficiently perform the settlement 
means. 

[2148] According to the invention cited in claim 36, the 
payment card issuing means can efficiently issue a pay- 
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ment card. 

[2149] According to the invention cited in claim 37. the 
telephone card issuing means can efficiently issue a tel- 
ephone card. 

[2150] According to the invention cited in claim 38, the 
ticket issuing means can efficiently issue a ticket. 
[2151] According to the invention cited in claim 39, the 
owner of the electronic wallet purchases, as an elec- 
tronic payment card, a payment card that is issued by 
the payment card issuing means, and can download the io 
payment card to the electronic wallet and use It. Thus, 
the usat)ilrty is improved. 

[2152] According to the invention cited in daim 40. 
since the owner of the electronic wallet designates the 
amount of a payment, an illegal act by a store can be 75 
prevented. 

[21 53] According to the invention cited in daim 41 , the 
owner of the electronk; wallet can confirm the contents 
of a trading session, and as a statement of account 
printed on paper need not be exchanged, a sale can be so 
handled wore efficiently 

[21 54] According to the invention cited in daim 42. the 
owner of an electronic wallet can purchase anywhere, 
as an electronic telephone card, a telephone card that is 
issued t>y the telephone card issuing means, and can 2s 
use the telephone card by downloading rt to the elec- 
tronic wallet. Thus, the usability is improved. 
[2155] According to the inventk>n cited in claim 43. a 
wireless communication servkie using a payment card 
clearing method can t>e received, and the usability is so 
improved. 

[2156] Accorcfing to the invention cited in daim 44. the 
owner of an electronic wallet can confirm tiie corrtents of 
the wireless oommunk^ation service that is empbyed. 
[2157] According to the invention cited in daim 45, the 35 
owner of an electronic wallet can purchase anywhere, 
as an electronic ticket, a ticket that is Issued by tiie ticket 
issuing means, and can use the ticket by downloading rt 
to the eiectronk; wallet. Thus, the usability is improved. 
[2158] According to the invention crted in claims 47 4o 
and 48. the ticket can be examined accurately and effi- 
cientiy. 

[2159] According to the invention dted in daim 49, 
since an electronic payment card can be transferred to 
another person, the usability is improved. 45 
[2160] According to the invention cited in claim 50. an 
elect'onrc payment card can be predsely transferred 
and troU}le that may accompany the transfer can be 
prevented. 

[2161] According to the invention dted in daim 51. so 

since an electronic telephone card can be transferred to 

another person, the usability Is improved. 

[2162] According to the invention cited in claim 52. an 

electronk; telephone card can be predsely transferred 

and trouk)le that may acconrpany the transfer can be 55 

pre/ented. 

[2163] According to the invention dted in daim 53. 
since an electronic ticket can be transfen-ed to arxrther 


person, the usabilrty is improved. 
[21 64] According to the invention cited in claim 54. an 
electonic ticket can be predsely transferred and trDut)le 
tiiat may accompany the transfer can be prevented. 
[2165] . According to the invention cited in daim 55, the 
owner of an electronic wallet can install an electronic 
payment card in the electronic wallet anywhere. 
[2166] According to the invention crted in claim 56. an 
electronk: payment card that the owner of the electronk: 
wallet designates can be installed in the electronic wal- 
let anywhere. 

[2167] According to the inventton cited in daim 57. the 
owner of the electronic wallet can Install an electronic 
telephone card in the electronic wallet anywhere. 
[2168] According to the invention cited in claim 58, an 
electrons telephone card that the owner of tiie elec- 
tronic wallet designates can be installed in the elec- 
tronic wallet anywhere. 

[21 69] According to the inventk>n cited in daim 59. the 
owner of the electronic wallet can install an eledronk; 
ticket in the electronic wallet anywhere. 
[21 70] According to the invention cited in claim 60. an 
electronk: M^ei that the owner of tiie electronic wallet 
designates can be installed in tiie electronic wallet any- 
where. 

[2171] According to the invention cited in claim 61 , an 
illegal installation due to imrTX)raltty can be prevented. 
[2172] According to the inventk)n dted in claim 62, a 
maximum one hundred million types of electronk: pay- 
ment cards, electronic telephone cards and electronk: 
tickets, and 10 to the 32nd power of cards or tickets of 
for each type can be kJentified by simple numerical 
entry 

[21 73] According to the invention cited in daim 63, the 
owner of the electronic wallet can reduce the communi- 
cation costs for a purchase, and can also receive, as a 
gift, an electronic payment card, an electronic telephone 
card or an electronic ticket. As a result, the distribution 
and ennployment of an electronic payment card, an elec- 
tronic telephone card or an electronic ticket can be 
accelerated. 

[21 74] According to the invention cited in claim 64, tiie 
distrtoution and employment of the eledronic payment 
card, the electronic telephone card or the electronic 
ticket can be accelerated. 

[21 75] According to the invention cited in claim 65, the 
contents of a ticket that has been issued can b& 
changed at a low cost. 

[21 76] According to the invention cited in daim 66, tiie 
modrf icatk)n of the contents of an event can be reported 
to the owner of the electronic ticket, and the electronic 
ticket can be updated. 

(21 77] According to the invention cited in daim 67, tiie 
owner of the eledronic ticket does not have to go to a 
ticket store for a refund, and can receive the refund any- 
where. 

[21 78] According to the invention cited in claim 68, ttie 
calculation function of a computer system can be effi- 
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dently distributed to individual intormation processing 
means. 

[2179] According to the invention cited in daim 69, an 
electronic payment card to be used and an electronic 
payment card in the sleeping state can be managed s 
s^aratety, and an eff ictent service operation is ena- 
bled. 

[2180] According to the invention cited in claim 70, 
since an electronic payment card must be registered to 
be used, even when an unregistered electronic payment io 
card in the steeping state Is stolen, Illegal use of that 
card will not occur. 

[2181] According to the invention cited in daim 71. an 
electronic telephone card to be used and an electronic 
telephone card in the sleeping state can be managed is 
separately, and an effident service operation is ena- 
bled. 

[2182] According to the invention cited in claim 72, 
since an electronic telephone card must be registered to 
be used, even when an unregistered electronic tele- 20 
phone card in the steeping state is stden, illegal use of 
that card wilt not occur. 

[2183] According to the invention cited in daim 73, an 
electronic tidcet to be used and an electronic ticket in 
the sleeping state can be managed separately, and an 2s 
effident service operation is enabled. 
[2184] According to the invention cited in claim 74, 
since an electronic tidcet must be registered for use, 
even when an unregistered electronic ticket in the 
steeping state is stolen, illegal use of that card will not 30 
occur. 

[2185] According to the invention cited in claim 75, 
dearing of the electronic payment card and the transfer 
of the electronic payment card can be safely performed. 
[2186] According to the invention cited in daim 76. the 35 
verification process can be mutually performed by the 
electronic wallet and the electronic payment card clear- 
ing means, and the safety of payment card clearing is 
improved. 

[2187] According to the invention cited in claims 78 40 
and 80, various types of electronic payment cards can 
k>e safely issued. 

[2188] According to the invention cited in claim 79, 
various types of electronic payment cards can be safely 
issued by individual payment card issuers. 4s 
[2189] According to the invention cited in claim 81 , 
settlement of the communication charge using the elec- 
tronic telephone card and the transfer of the electronic 
telephone card can be safely perfbrnrted. 
[2190] According to the invention dted in daim 82, a so 
message generated by the electronic telephone card 
can be accompanied by the digital signature of the elec- 
tronic telephone card, and the validity of the message 
can be verified. 

[2191] According to the invention cited in daim 83, the ss 
verification process can be nrujtually perfomied by the 
electronic wallet and the electronic telephone card 
dearing means, and the safety of telephone card dear- 


ing is improved. 

[2192] According to the invention cited in claims 84 
and 86, various types of electronic telephone cards can 
be safely issued. 

[2193] According to the invention cited in claim 85, 
various types of electronic telephone cards can be 
safely issued by individual telephone card issuers. 
[21 94] According to the invention cited in claim 87, the 
examination of an electronic ticket and the transfer of 
the electronic ticket can be safely performed. 
[2195] According to the inventon dted in daim 88. a 
message generated by the electronic ticket can be 
accompanied by the digital signature of the electronic 
ticket, and the validity of the message can be verified. 
[2196] According to the invention cited in claim 89. the 
verification process can be mutually performed by the 
electronic wallet and the electronic ticket examination 
means, and the safety of ticket examination is inproved. 
[2197] According to the invention cited in daims 90 
and 92, various types of electronic tickets can be safely 
issued. 

[2198] According to the invention cited in claim 91, 
various types of electronic tickets can be safely issued 
by individual ticket issuers. 

[2199] According to the invention dted in daim 93, a 
payment method can be selected when an electronic 
payment card is purchased, and the usability is 
improved. 

[2200] According to the invention cited in claim 94, the 
payment card issuing nr^eans can designate a template 
program that is used for the electronic payment card, 
and various types of electronic payment cards can be 
issued. 

[2201 ] According to the invention cited in claim 95, the 
representative component information can be desig- 
nated when an electronic payment card is issued, and 
various types of electronic payment cards having a high 
degree of freedom can be issued. 
[2202] According to the invention cited in claim 96. 
since the signature key of the electronic payment card is 
updated by registering the card, the safety is improved. 
[2203] According to the invention dted in daim 97. an 
electronic payment card that is to be used can be 
selected, and the usability is improved. 
[2204] According to the inventfon cited in claim 98. 
since a value ttiat is equal to or greater than the amount 
of a payment designated by the owner of the electronic 
wallet is not paid, the safety is improved. 
[2205] According to the invention cited in claim 99, 
since the contents of an electronic payment card used 
for the payment are precisely represented tor the elec- 
tronic payment card clearing means, the electronic pay- 
ment card dearing means can determine whether the 
pertinent electronic payment card is valid. 
[2206] According to the invention cited in claim 100, 
the amount of a payment and a person wtio is to receive 
the payment are guaranteed, and an illegal charge by a 
store can be prevented. 
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[2207] According to the invention dted in claim 101 . 
whether a micro-check is issued by the owner of the 
electronic payment card is determined, and the validity 
of the micro-check can be exactly verified. 
[2208] According to the invention cited in claim 102, 
the generation order for a mk:ro-check and the matching 
of the remaining value can be examined, and further, 
the validity of the mtcro-check can be precisely exam- 
ined. 

[2209] According to the invention cited in claim 103, a 
used micro-check can be automatically collected, and 
its validity can be examined. 

[2210] According to the inverrtion dted in daim 104. 
the transfening side and the redpient side can negoti- 
ate the contents to be transferred. 
[2211] According to the invention dted in daim 105, 
the recipient side can confirm the contents of an elec- 
tronic payment card to be transferred. 
[2212] According to the invention dted in daim 106* 
since the redpient is guaranteed, even when a payment 
card transfer certificate message is stolen, the paynient 
card will not be illegally empbyed. 
[2213] According to the invention cited in claim 107. a 
payn)ent method can be selected when an electronk; 
telephone card is purchased, and the usability is 
improved. 

[2214] According to the invention dted in daim 108. 
the telephone card issuing means can desi^ate a tem- 
plate program tfiat is used for the electronic telephone 
card, and various types of electronic telephone cards so 
can be issued. 

[2215] According to the invention dted in daim 109. 
the representative component informatk)n can be desig- 
nated when an electronic telephone card is issued, arxl 
varkius types of electronic telephone cards having a 35 
high degree of freedom can be issued. 
[2216] According to the invention dted in daim 110, 
since the signature key of the electronic telephone card 
is updated by registering the card, the safety is 
improved. 40 
[2217] According to the invention dted in claim 111, 
an electronic telephone card that is to be used can be 
selected, and the usability is improved. 
[2218] According to the invention dted in daim 112. 
the communication service provkjer can charge a fee in 4s 
accordance with a wireless communication service that 
is provkled. 

[2219] According to the invention dted in daim 113. 
only a small amount of history information is required, 
even when the settlement of additbnal charges is per- so 
formed many times during a communk:ation session. 
[2220] According to the invention dted in daim 114, 
since the contents of an electrons t^ephone card used 
for payment are predsely represented for the electronic 
telephone card clearing means, the electronic tele- 55 
phone card clearing means can determine whether the 
pertinent electronic telephone card is valid. 
[2221 ] According to the invention dted in daim 1 1 5, 


the amount of a payment and a person who is to receive 
the payment are guaranteed, and an illegal charge by 
the owner of the electronic telephone card can be pre- 
vented. 

[2222] According toihe invention dted in daim 116. 
whether a telephone nvcro-check is issued by the owner 
of the electronic telephone card is determined, and tiie 
valklity of the telephone micro-check can be exactly ver- 
ified. 

[2223] According to the invention dted in claim 117. 
tiie generation order for a telephone micro-check and 
the matching of the remaining value can be examined, 
and the validity of the telephone micro-check can t>e fur- 
ther precisely examined. 

[2224] According to the invention cited in claim 1 1 8. a 
used telephone mk:ro-check can be automatically col- 
lected, and the validity can be examined. 
[2225] According to the invention dted in daim 1 19. 
the ti'ansferring side and the redpient skJe can negoti- 
ate the contents to be transfen^ed. 
[2226] According to the invention dted in daim 120, 
the redpient side can confirm the contents of an elec- 
tronic telephone card that is to be transfened. 
[2227] According to the invention dted in daim 121 . 
since the redpient is guaranteed, even when a payment 
card transfer certificate message is stolen, the payment 
card will not be illegally employed. 
[2228] According to the inverrtion cited in claim 122. a 
payment method can be selected when an electronic 
ticket is purchased, arrd tiie usability is improved. 
[2229] According to the invention dted in daim 123. 
the ticket issuing means can designate a template pro- 
gram that is used for the electronk: ticket, and various 
types of electronic tickets can be issued. 
[2230] According to the invention dted in daim 124. 
the representative component informatbn can be desig- 
nated when an electronic ticket is issued, and various 
types of electronic tickets having a high degree of free- 
dom can be issued. 

[2231] According to the invention dted in daim 125, 
since the signature key of the electronic ticket is 
updated by registering the ticket, the safety is improved. 
(2232] According to the invention cited in daim 126. 
an electronic ticket that is to be used can be selected, 
and the usability is improved. 
[2233] According to the invention dted in claim 127. 
the electronic ticket examination means can perform the 
examination process in accordance with a ticket that is 
presented. 

[2234] According to the invention dted in daim 128. 
since tiie contents of an electronic ticket to be used are 
predsely represented for the electronic ticket examina- 
tion means, the electronic ticket examination means can 
determine whether tiie pertinent electronic ticket is 
valkJ. 

[2235] According to the inverrtion dted in daim 129. 
tiie contents of the electronic ticket that is examined is 
guaranteed, and an illegal charge by the owner of the 
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electronic ticket can be prevented. 
[2236] According to the invention cited in claim 130, 
whether a ticket exan^nation response message is 
issued by the owner of the electronic ticket is deter- 
mined, and the validity of the ticket examination 
response can be exactly verified. 
[2237] According to the invention cited in claim 131 , 
the generation order for a ticket examination response 
message and the matching of the changes of the sta- 
tuses can be exanrvned, arKt the validity of the ticket 
examination response message can be precisely exam- 
ined. 

[2238] According to the invention cited in daim 1 32. a 
ticket examination response can be automatically col- 
lected, and the validity can be examined. 
[2239] According to the invention cited in claim 133, 
the transferring side and the recipient side can negoti- 
ate the contents to be transferred. 
[2240] According to the invention cited in claim 134, 
the recipient side can confirm the contents of an elec- 20 
tronic ticket that is to be transferred. 
[2241] According to the invention cited in claim 135. 
since the recipient is guaranteed, even when a ticket 
transfer certificate message is stolen, the ticket will not 
be illegally employed. 25 
[2242] According to the invention cited in claim 136, 
the payment card issuer, the telephone card issuer and 
the ticket issuer can designate the procedures for clear- 
ing. 

[2243] According to the invention cited in claim 137. 30 
an electronic payment card, an electronic telephone 
card and an electronic ticket can be issued wrtfiout 
keeping a purchaser waiting. 

[2244] According to the invention cited in claim 138, 
an electronic paynient card, an electronic telephone 35 
card and an electronic ticket can be issued without 
keeping a purchaser waiting. 

[2245] According to the invention cited in daim 1 39, a 
plurality of electronic payment cards, electronic tele- 
phone cards and electronic tickets, ar>d history infomna- 40 
tion can also be nronaged in the memory of an 
electronic wallet that has a limited capability. 
[2246] According to the invention cited in daim 140 
and 141, the service life of a battery for tfie electronic 
wallet or for the electronic payment card clearing means 4S 
can be extended. 

[2247] According to the invention cited in claim 144, 
the counterfeiting of printed material can be prevented. 
Further, according to the invemion for a recording 
medium on which are stored various prog^ams, such as so 
a control program for the central processing unit of the 
electronic wallet, these programs can be distributed in a 
portable form. 

[2248] According to the invention cited in claim 155, 
the third storage means for storing the klentification 55 
information artd authorization information for a user is 
loaded into an art>itrary electronic wallet, so tfiat the 
electronic wallet can be used as the electronic wallet of 


that user. 

[2249] According to the invention cited in claim 156, 
communication with the service providing means is not 
required when the third storage means is to be loaded 
into and unloaded from the electronic wallet 
[2250] According to the invention cited in claim 157, 
an electronic negotiat)le card that is obtained using the 
electronic wallet can be carried while stored in the IC 
card. 

[2251] According to the invention of printed material 
on which is printed electronic paymerrt installation infor- 
nnation. electronic telephone card installation infonma- 
tion or electronic ticket installation information, and a 
recording medium on which such information is stored, 
an electmnic payment card, an electronic telephone 
card or an electronic ticket can be transmitted akang a 
distribution route. 

[2252] The printed material to which the removable 
coating is applied can be prevent the leakage of instal- 
lation informatkjn before tNs printed material is pur- 
chased. 

Claims 

1. A mobile electronic commerce system fa paying, 
via wireless communication means, a required 
amount from an electronic wallet that includes said 
wireless communication means and for receiving a 
product or a service, or a required permission, from 
a supply side, comprising: 

service means for connecting said electronic 
wallet and said supply side via said communi- 
cation means. 

wherein said service means installs, via said 
communication means, a program for an elec- 
tronic negotiable card in said electronic wallet; 
wherein seiid electronic negotiable card that is 
installed is employed to receive a product or a 
service, or a required permission, from said 
supply side: 

wherein based on a program for said electronic 
negotiable card a settiement process for which 
said electronic negotiable card is used, is per- 
formed by said electronic wallet and said sup- 
ply side via said communication means; and 
wherein, in association with said settiement 
process, said data that are stored in said elec- 
tronic wallet and at said supply side are trans- 
mitted to said service means at a 
predetermined time, and are managed thereat. 

2. A mobile electronic commerce system for paying, 
via wireless communication means, a required 
anrKXjnt using an elecb-onic wallet that includes said 
wireless oommunkation means and for receiving a 
product or a s^vice. or a required permission, from 
a supply side. 
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wherein, via said wireless cormtunication means, 
said electronic wallet applies the purchase of a pro- 
gram for an electronic negotiable card to service 
means for Issuing said program for said electronic 
negotiable card; 5 
wherein said service means receives from elec- 
tronic negotiable card issuing means data concern- 
ing said electronic negotiable card, and with 
settlement means performs a settlement that is 
associated with the purchase of said electronic w 
negotiable card; 

wherein, via said wireless communication nrteans. 
said program for said electronic negotiable card is 
installed in said electronic wallet; 
wherein said electronic negotiable card that is 15 
installed is employed for receiving a product or a 
service, or a required penmlssion, from said supply 
side; and 

wherein, based on said program for said negotiable 
card, a settlement process based on the use of said 20 
negotiable card is performed by said electronic wal- 
let and said supply side via said communication 
means. 

3. A mobile electronic commerce system according to 2s 
claim 1 or 2, wherein, in said settiemerrt process for 
which said negotiat>le card is used, said electronic 
wallet generates an electronic check corresporKling 

to a payment amount based on said program pro- 
vided for said negotiable card, and transmits said 30 
electronic check to said supply side via said wire- 
less oommunk:ation means; wherein said supply 
side, upon receiving said electronic checK trans- 
mits an electronic receipt to said electronic wallet; 
wherein, thereafter, said electronic wallet and saki 35 
supply skle respectively store said electronk: 
receipt and sakj electronic check as data concern- 
ing said settiement process. 

4. A mobile electronic commerce system according to 40 
claim 1 or 2. wherein, in said settiement process for 
which said electronk; negotiable card is used, 
based on sakj program provkJed for sakj electronk; 
negotiat^e card sati electronic wallet transmits data 

for sakl electronk; negotiable card to saki supply 4s 
side via sakl wireless communication means; 
wherein sad supply skle, upon receiving said data 
for said electronic negotiable card, transmits to sakl 
electronic wallet an electronic certificate required 
for tiie granting of entrance permission and the so 
admissk>n of the owner of sad electronic wallet; 
and wherein, thereafter, sad electronk; wallet and 
sad supply sde respectively store sad electronic 
certifdate and sad data for sad ^ectronic negotia- 
ble card as data concerning sad settlement proc- 55 
ess. 

5. A mobile electronic commerce system according to 


claim 1 or 2, wherein, in order to transfer said elec- 
tronic negotiable card that is installed in sad elec- 
tronic wallet to a different electronic wallet, sad 
electronic wallet generates a t'ansfer message 
using said electronic negotiable card and transmits 
said message to sad different electronic wallet; 
wherein said electronic wallet deletes sad stored 
electronk: negotiable card, and sad different elec- 
tronic wallet fransmits. to sad service means, sad 
transfer message for sad negotiable card; wherein, 
thereafter, sad service means installs a program 
for sad electronic negotiable card in sad different 
electrons wallet. 

6. A mobile electronic commerce system according to 
claim 1 or 2. wherein sad electronic wallet trans- 
mits to sad service means, via sad wireless com- 
municatdn means, an installatdn nuvrber to be 
recorded on or in a distribtrtfon mecfium. such as 
printed matter or a reconcfing medium; and wherein 
said service means receives, from negotiable card 
issuing means, data concerning an elechx)nk; 
negotiable card tiiat is to be issued, and tiirough 
wireless commundation installs a program fa an 
electronk; negotiable card corresponding to sad 
installation number. 

7. A nrKsbile electronic commerce system according to 
daim 1 or 2, wherein said service means manages 
a template program tiiat is a model of a program for 
an electronic negotiable card, and based on sad 
template program generates said program for sad 
electronic negotiable card and installs sad program 
in sad electronic wallet. 

8. A mobile electronic commerce system for paying, 
via wireless communication means, a required 
amount from an electronic wallet that includes sad 
wireless communication means and for receiving a 
product or a service, or a required permission, from 
a SLppty side. 

wherein a program for an electronic negotiable card 
includes an inherent private key. and 
wherein, when an electi^onic wallet employs sad 
negotiable card, said private key is employed to add 
a digital signature to data that are to be transmitted 
to a supply side via communication means. 

9. A mobile electronic commerce system for paying, 
via wireless communication means, a required 
amount from an eledronic wallet that includes sad 
wireless communication means, and for receiving a 
product or a service, or a required permission, from 
a SLfsply side, 

wherein said electronic wallet hods an electronk; 
payment card that serves as an electnonic payment 
card program, and employs said elecfronic pay- 
ment card when paying said required amount for 


185 


369 


EP0950 968A1 


370 


said product or said service that is received from 
said supply side; arxd 

wherein, via said wireless communication means, 
said electronic wallet and said supply side perform 
a settlement process that is associated with said 5 
payment. 

10. A mobile electronic convnerce system according to 
claim 9. wherein an electronic paynnerrt card settle- 
ment means for making a payment using said elec- 10 
tronic payment card is provided for said supply side. 

1 1. A mobile electronic commerce system according to 
daim 10, wher^n service means is provided to 
connect via said communication means, said elec- is 
tronic wallet and said electronic payment card set- 
tlement means and to connect via said 
communication means, said payment card issuing 
means and said settlement means, so that said 
electronic wallet can purchase said electronic pay- 20 
ment card through said service means. 

12. A mobile electronic commerce system according to 
claim 1 1 , wherein said electronic wallet, said elec- 
tronic payment card settlement means, and said 25 
service means individually include a plurality of 
types of communication nDeans, and wherein said 
electronic wallet said electronic payn^nt card set- 
tlement means, and said service means employ Af- 
ferent communication means when communication 30 
among the three is conducted. 

13. A mobile electronic conrtmerce system for paying, 
via wireless communication means, a required 
amount from an electronic wallet that includes said 35 
wireless communication means and for receiving a 
prcxiuct or a service, or a required permission, from 

a supply side, 

wherein said electronic wallet holds an electronic 
telephone card that serves as an electronic tele- 40 
phone card program, and employs said electronic 
telephone card when paying a required mount for a 
communication that is performed via wireless com- 
munication means using an exchange service pro- 
vided by said supply side; and 45 
wherein said electronic wallet and said supply side 
perform, via said wireless comnuinication means, a 
settlement process tfiat accompanies said pay- 
ment 

so 

14. A mobile electronic commerce system according to 
claim 13. wherein said supply side includes com- 
nuinication line exchange means and electronic tel- 
ephone card settlement means for settling said 
payment using said electronic telephone card. ss 

15. A mobile electronic convnerce system according to 
claim 14, wherein service nneans is provided for 


connecting, via said communication means, said 
electronic wallet and said electronic payment card 
settlement means, and for connecting, via said 
communication means, said payment card issuing 
means and said settlement means, so that said 
electronic wallet can purchase said electronic tele- 
phone card through said service means. 

16. A mobile electronic commerce system according to 
daim 15, wherein said electronic wallet, said elec- 
tronic telephone card settlement means, and said 
service means individually tndude a plurality of 
types of communication means, and wherein said 
electronic wallet, said electronic telephone card 
settlement means, and said service means employ 
different oomnnunication means when communica- 
tion among the three is conducted. 

17. A mobile electronic commerce system for paying, 
via wireless communication means, a required 
amount from an electronic wallet that includes said 
wireless communication means and for receiving a 
product or a service, or a required pernrrission, from 
a supply side. 

wtierein said electronic wallet holds an electronic 
ticket that is electronically constituted, and provkies 
information concerning said electronic ticket; and 
wherein sakJ electronic wallet and saki supply side 
perfbnm, via said wireless communicatk»n means, 
an examination process for said electronic ticket for 
granting permission for an admission. 

18. A mobile electronic commerce system according to 
daim 17, wherein electronic tidtet examinatbn 
means for examining said electrons tk:ket is pro- 
vided for said supply side. 

19. A mobile electronic commerce system according to 
daim 18. wherein service means is provided for 
connecting, via sak\ communication means, sakj 
electronic wallet and said electronic ticket examina- 
tion means, and for connecting, via said communi- 
cation means, said ticket issuing means and sakJ 
settlement means, so that saki electronic wallet can 
purchase said electronic ticket through saki service 
means. 

20. A mobile electronic commerce system according to 
daim 18. wherein said electronic wallet, sakj elec- 
tronic ticket examination means, and sakJ service 
means indivkJually include a plurality of types of 
communication means, and wherein said electronic 
wallet, sakj electronic ticket examination means, 
and sakj service means employ different communi- 
cation means when communication among the 
three is performed. 

21. A mobile electronic commerce system comprising: 
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said electronic wallet defined in claim 9; 

electronic payment card settlement means; 

electrode telephone card settlement means; 

electronic ticket examination means; 

service provision means; s 

settlement processing means; 

payment card issuing means; 

telephone card issuing means; and 

ticket Issuing means. 

10 

22. A mobile electronic commerce system according to 
claim 11, wherein said electrortic wallet holds an 
electronic credit card and employs said electronic 
credit card to purchase said electronic payment 
card, said electronic telephone card or said elec- 75 
tronic ticket 

23. A mobile electronic commerce system according to 
claim 12. wherein said electronic wallet includes a 
plurality of kinds of wireless communication means 20 
as said plurality of types of communication means. 

24. A mobile electronic commerce system according to 
claim 23, wherein, as means for engaging in wire- 
less communication with said electronic payment ss 
card settlement means or said electronic ticket 
examination means, said electronic wallet includes 
wireless communication means that has a shorter 
communication distance and a higher directivity 
than has the wireless communication means 30 
employed for said electronic telephone card settle- 
ment or for said service provkling means. 

25. A mobile electronic commerce system according to 
claim 24, wherein, as means for engaging in wire- 35 
less communication with said electronic payment 
card settlement means or said electronic ticket 
examination means, said electronic wallet includes 
optical communication means and radio communi- 
cation means for engaging in wireless comnmjnica- 40 
tion with said electronic telephone card settlement 
means or said service providing means. 

26. A mobile electronic commerce system according to 
claim 1 0, wherein said electronic payment card set- 46 
tlenDent means includes wireless communication 
means for engaging in commiffiication with said 
service provkJing means. 

27. A mobile electronic commerce system according to so 
claim 10. wherein said electronic payment card set- 
tlement means is an automatic vending machine 
that includes automatic product or service providing 
means. 

55 

28. A mobile electronic commerce system according to 
claim 9, wherein said electronic wallet comprises: 


input means for entering a numerical value and 
for performing a selection operation; 
a central processing unit for generating data to 
be transmitted via said wireless communication 
means, and for processing data received via 
said wireless communication means; 
first storage means for storing a control pro- 
gram for controlling an operation performed by 
said central processing unit; 
display means for displaying data processed by 
said central processing unit; and 
second storage means for storing said data 
processed by saki central processing unit, 
wherein saki electronic ticket said electronic 
payment card or sakJ electronic telephone card 
is stored in said second storage means. 

29. A mobile electronic commerce system according to 
darm 10, wherein said electronic payment card set- 
tlement means includes: 

optical communication means for communicat- 
ing with said electronic wallet; 
communication means for communicating with 
saki service providing means; 
input means for entering a numerk:al value and 
performing a selection operation; 
a central processing unit for generating data to 
be transmitted via said optical communication 
means and sakl communrcation means, and for 
processing data received via said optical com- 
munication means and saki communication 
means; 

first storage means for storing a control pro- 
gram for oontrolling an operatkwi performed by 
said central processing unit; 
display means for displaying data processed by 
said central processing unit; and 
second storage means for storing said data 
processed by said central processing unit, 
wherein a settiement process program module 
for said electronic payment card is stored in 
said second storage means. 

30. A mobile electronic commerce system according to 
claim 10. wherein said electronic paymerrt card set- 
tiement means comprises: 

optical communication means for communicat- 
ing with said electronic wallet; 
radio oomnunication means for communicat- 
ing with said service providing means; 
product identification means for kientifying a 
product type; 

input means for entering a numerical value and 
for performing a selection operation; 
a central processing unit for calculating a 
charge for said product, for generating data to 
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be transmrtted via said optical communication 
means and said radio communication means, 
and for processing data received via said opti- 
cal oommunication means and said radio con> 
munication means; • 5 

first storage means for storing a control pro- 
gram for controlling an operation performed by 
said central processing unit; 
display means for displaying data processed by 
said central processing unit; io 
second storage means for storing said data 
processed by said central processing unit; and 
third storage means for storing value informa- 
tion for said product 

wherein a settlennent process program nrKXjule is 
for said electronic payment card is stored in 
said secorxl storage means. 


31 . A mobile electronic commerce system according to 
daim 27, wherein said automatic vending machine 
corrprises: 


said service providing means; 
communication line exchange means for 
exchanging a plurality of comnunication lines; 
a central processing unit for generating data to 

be transnHtlBd via said radio communication 

means and said communication means, and for 
processing data received via said radio com- 
munication means and said communication 
means; 

first storage means for staing a control pro- 
gram for controlling an operation performed by 
said central processing unit; and 
second storage means for storing said data 
processed by said centnat processing unit, 
wherein a settlement process program module 
for said electronic telephone card is stored in 
said second storage means. 

33. A mobile electronic commerce system according to 
20 daim 17, wherein said electronic ticket examination 
means comprises: 


optical communication means for oonrmunicat- 

ing with said electronic wallet; 

radio communicatfon means for oommunicat- 

Ing with said service providing means; 

selection means for selecting a product to be 

purchased or a service; 

automatic providing means for providing said 

product or said service; 

a central processing unit for generating data to 
be transmitted via said optical communication 
means and said radio communication means, 
and for processing data received via said opti- 
cal oommunication means and said radio con> 
munication means; 

first storage means for storing a control pro- 
gram for controlling an operation performed by 
said central processing unit; 
display means for displaying data processed by 
said central processing unit; 
second storage means for storing said data 
processed by said central processing unit; 
third storage means for storing value intomna- 
tion and stock information for said product; and 
fourth storage means for storing pronrxstion 
information for said product or for said service, 
wherein a settlement process program modUe 
for said electronic payment card is stored in 
said second storage means. 

32. A mobile electronic commerce system according to 
daim 14 or 21, wherein said electronic telephone 
card settlement means comprises: 

radfo communicatfon means for communicat- 
ing with said electronic wallet; 
communicatfon means for communicating with 


optical communication nrieans for communicat- 
ing with said electronic wallet; 
communication means for communicating with 
said service providing means; 
irput means for entering a numerical value and 
for performing a selection operation; 
a central processing unit for generating data to 
be transmitted via said optical communication 
means and said communication means, and for 
processing data received via said optical oorrv 
munication means and said communication 
means; 

first storage means for storing a control pro- 
gram for controlling an operation performed by 
said central processing unit; 
display means for displaying data processed by 
said centred processing unit; and 
second storage means for storing said data 
processed by said central processing unit, 
wherein an examination program module for 
said electronic ticket is stored in said second 
storage means. 

34. A mobile electronic commerce system according to 
daim 21, wherein said service providing means 
comprises: 

user information storage means for storing 
irrformatfon concerning said electronic wallet 
and information concerning a settlement con- 
tract conduded with an owner of said electronic 
wallet; 

merchant information storage means for stor- 
ing information concerning said electronic pay- 
ment card settlement means, said electronic 
telephone card settlement means and said 
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electronic ticket examination means, and infor- 
mation concerning a settlement contracts con- 
cluded with owners of electronic payment 
cards, electronic telephone cards and elec- 
tronic tickets; 5 
settlement processor information storage 
means for storing information concerning said 
settlement processing means: 
payrVient card issuer infbmiation storage 
means for storing informatk)n concerning said io 
payment card issuing means, arx) information 
concerning a settlement contract concluded 
with an owner of said payment card issuing 
means; 

telephone card issuer information storage i5 
means for storing information concerning said 
telephone card issuing nr»ean&, and information 
concerning a settlement contract concluded 
with an owner of saki telephone card issuing 
means; zo 
ticket issuer information storage means for 
storing informatk)n concerning said ticket issu- 
ing means, and irri6rmatk}n corKerning a set- 
tlement contract concluded with an owner of 
said ticket issuing means; 2S 
service director information storage means for 
storing list infonnation for said electronic wallet, 
said electronic payment card settlement 
means, sakl electronk: telephone card settle- 
ment means, sakJ electronic ticket examination 30 
means, said settlemerrt processing means. 
sakJ payment card issuing means, said tele- 
phone card issuing n>eans and said tktet issu- 
ing means, arxl information concerning sakl 
electronic ticket, sakj electronic payment card 35 
and said electronic telephone card; and 
a computer system for processing data in a 
sendee provision process for selling, issuing 
and managing said electronic tk:ket. said elec- 
tronic payment card and sakl electronic tele- 4o 
phone card. 

35. A mobile electronic commerce system according to 
claim 11, wherein said settlement processing 
means comprises: as 

comnuinication means for communicating with 
sakl service provkJing means; 
sutjscrber information storage means for stor- 
ing information concerning a settlement con- so 
tract concluded with an owner of saki electronic 
wallet; 

member shop information storage means for 
storing informatkin concerning settlement con- 
tracts concluded with owners of electronic pay- ss 
ment card settlement means, electronic 
telephone card settlement means, electronk; 
ticket examination means, payment card issu- 


ing means, telephone card issuing means, and 
ticket issuing means; and 
a computer system for processing data 
employed in a settlement process. 

36. A nfKibile electronic commerce system according to 
claim 1 1 . wherein said payment card issuing means 
comphses: 

conuTiunk:ation means for communicating with 
sakJ service providing means; 
customer information storage means for stor- 
ing information concerning the purchase Ns- 
tory of a customer; 

payment cand issuance information storage 
means for storing information concerning a 
payment card that has been issued; 
payment card information storage means for 
storing information concerning the stock of 
payment cards; and 

a computer system for processing data during 
a payment card issuing trEinsaction process. 

37. A mot>ile electronic commerce system according to 
daim 15. wherein said telephone card issuing 
means comprises: 

communk;ation means for communicating with 
said service providing means; 
customer information storage means for stor- 
ing information concerning the purchase his- 
tory of a customer; 

telephone card issuance irrformation storage 
means for storing information concerning a tel- 
ephone card that has been issued; 
telephone canj information storage means for 
staing information concerning the stock of tel- 
ephone cards: and 

a conputer system for processing data con- 
cerning a telephone card issuing trartsaction 
process. 

38. A mobile electronic commerce system according to 
daim 19, wherein said ticket issuing means com- 
prises: 

communication means for communicating with 
said service providing means; 
customer information storage means for stor- 
ing information concerning the purchase his- 
tory of a customer; 

tki<et issuance information storage means for 
storing information concerning a ticket tfiat has 
been issued; 

tki^t information storage means for storing 
information concerning the stock of tickets; and 
a computer system for processing data con- 
cerning a ticket issuing ti'ansaction pnxess. 


189 


377 


EP0950 968A1 


378 


39. A mobile electronic commerce system according to 
claim 1 1 , wherein said electronic waliet generates 
and then transmits, to said service providing 
means, a payment card application message for the 
purchase of an electronic payment card, wherein 
said service providing means, upon receiving said 
payment card application message, communicates 
with said payment card issuing means and receives 
therefrom an electronic payment card issuance 
request message requesting that said service pro- 
viding means perform an electronic payment card 
Issuing process and an electronic payment card 
charge settlement process; wherein said service 
providing means, upon receiving said request mes- 
sage, communicates with said settlement process- 
ing means to perform the settlement process for the 
charge for saki payment card, generates an elec- 
tronic payment card from payment card infonmation 
that is generated by said payment card issuing 
means and is included in said electronic payment 
card issuance request message, avd transmits said 
electronic payment card to said electronic wallet; 
and wherein said electronic wallet, upon receiving 
said electronic payment card, stores said electroruc 
payment card In said second storage means 
thereof. 

40. A mobile electronic commerce system according to 
daim 28, wherein a micro-check message, gener- 
ated by an electronic payment card stored in said 
second storage means, is transmitted to said elec- 
tronic payment card settlement mears in order to 
confrm the submission of a payment that is the 
equivalent of an amount entered by said input 
means. 

41. A mobile electronic commerce system according to 
claim 40, wherein said electronic payment card set- 
tlement means, upon receiving said micrc^check 
message, generates and then transmits, to said 
electronic wallet, said reception message to 
acknowledge that said miao-check nriessage has 
been received. 

42. A vndbWe electronic commerce system according to 
claim 15, wherein said electronic wallet generates 
and then transmits, to said service providing 
means, a telephone card application message 
requesting the purchase of an electronic telephone 
card; wherein said service provkjing means, upon 
receiving sakl telephone card applicatksn message, 
communicates with said telephone card issuing 
means and receives therefrom an electronic tele- 
phone card issuarKe reguest message indicating 
said service providing means has been requested 
to perform an electronic telephone card issuing 
process and an electronic telephone card charge 
settlement process: wherein said service providing 


means, upon receiving said request message, 
communicates with said settlement processing 
means to perform the settlement for the charge for 
said telephone card, generates an electronic tele- 

5 — phone card usingtelephone card information that is 
generated by said telephone card issuing means 
arKi Is inclixjed in said electronic telephone card 
issuance request message, and transrrtits said 
electronic telephone card fo said electronic wallet; 

w and wherein sa\6 electronic wallet, upon receiving 
said electronk; telephone card, stores said elec- 
tronic telephone card in said second storage means 
thereof. 

15 43, A nxibile electronic connmerce system according to 
daim 28, wherein a telephone miacKrfieck mes- 
sage is generated by an electnonk: telephone card 
stored in said second storage means and is trans- 
mitted to said electnonk; telephone card settlement 

20 means In order to confirm the submissfon of a pay- 
ment that is equivalent to an amount charged by 
said electronic telephone settlement means. 

44. A mobile electnonk: convnerce system according to 
25 Claim 43, wherein said electronic telephone card 

settlement means, upon receiving sakl telephone 
micro-check message, generates and then trans- 
mits, to said electronic wallet, a receipt message 
acknoM^edging that said telephone micro-check 
30 message has been received. 

45. A nx>bile electnonk: commerce system accondir^ to 
daim 19, wherein said electronic wallet generates 
and then transmits, to said service provkling 

35 means, a ticket application message requesting the 
purchase of an electronic ticket; wherein saki serv- 
ice providing means, upon receiving sakl ticket 
application message, commurvcates with said 
ticket issuing means, and receives therefrom an 

40 electronic ticket issuance request message that 
indicates said service provding means has been 
requested to perform an electronic ticket issuing 
process and an electronic ticket charge settlement 
process; wherein said service providing means, 

45 upon receiving saki request message, communi- 
cates with sakl settlement processing means to 
perform the settlement of the charge for said ticket, 
generates an electronic ticket from ticket informa- 
tion that Is generated by said ticket Issuing means 

so and Is Included in said electronic ticket Issuance 
request message, and trar^smits said electronic 
ticket to sakl electronic wallet; and wherein sakl 
electronic wallet upon receiving said electronic 
tk:ket stores said electronic ticket in sakl second 

55 storage means thereof. 

46. A nrx)bile electronic conmerce system according to 
daim 28, wherein said etectronk; wallet generates a 
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ticket presenting message that describes the con- 
tents of said electronic ticket stored in said secorxl 
storage means, and transmits said ticket presenting 
message to said electronic ticket examination 
means. -5 

47. A mobile electronic commerce system according to 
claim 28, wherein said electronic wallet, upon 
receiving a command message from said electronic 
ticket examination means, changes said electronic io 
ticket to a post-examined state, and generates and 
then transmits, to said electronic ticket examination 
means, a tk:ket examination response message 
that desaibes the contents of said electronic tkrket 
that has been changed. 75 

48. A mobile electronic commerce system according to 
claim 47. wherein said electronic ticket examination 
means, upon receiving said ticket examination 
response message, generates and then transmits, zo 
to said electronic wallet, an examination certifk^te 
message that verifies saki electronic ticket has 
been examined. 

49. A mobile electronic commerce system according to ss 
claim 28. wherein a first electronic wallet generates 

a payment card transfer certificate message verify- 
ing that sakJ electronk; paymem card stored In sad 
second storage means is to be transferred to a sec- 
ond electronic wallet, and transmits saki payment 30 
card transfer certifk:ate message via wireless com- 
municatbn means to sakJ second dectronk; wallet; 
wherein sakJ second electronic wallet transmits, to 
sakJ service pro/kjing means. sakJ payment card 
transfer certificate message that is received; 35 
wherein said servce provkling means performs an 
examinatk)n to establish the validity of said pay- 
ment card transfer certificate message that is 
received, and transmits, to saki second electronk; 
wallet, the electronic payment card that is ^ 
described in saki payment card transfer certifkate 
message; and wherein saki second electronic wal- 
let stores. In said second storage means thereof, 
saki electronk; payment card that is received. 

45 

50. A mobile electronic commerce system according to 
claim 49. wherein said second electronic wallet, 
upon receiving said payment card transfer certifi- 
cate message, generates a payment card receipt 
message confirnrvng that said payment card trans- 50 
fer certifkate message has been received, and 
transmits said payment card receipt message via 
saki wireless communication means to said first 
electronk: wallet; and wherein said first electronk: 
wallet, upon receiving saki payment card receipt 55 
message, deletes saki electronic payment card 
stored in saki second storage means thereof. 


51. A mobile electronic commerce system according to 
claim 28, wherein a first electronk: wallet generates 
a telephone card transfer certifkate message con- 
firming that saki electronic telephone card stored in 
said second storage means is to be transferred to a 
second electronic wallet, and transmits saki tele- 
phone card transfer certificate message via wire- 
less communication means to saki second 
electronk: wallet; wherein saki second electronic 
wallet transmits, to said service providing nieans. 
said telephone card transfer certificate ntessage 
that is received; wherein saki service provkiing 
means performs an examination to establish the 
valkiity of said telephone card transfer certifkate 
message that is received, and transmits, to said 
second electronic wallet, the electronic telephone 
card that is described in sad telephone card trans- 
fer certificate message; and wherein said secorxj 
electronk: wallet stores, in sad second storage 
means thereof, said electronic telephone card that 
is received. 

52. A rrxibile electronic commerce system according to 
claim 28, wherein sad second electronic wallet, 
ipon receiving sad telephone card transfer certifi- 
cate message, generates a telephone card receipt 
message conf imiing that sad telephone card trans- 
fer certifkate message has t>een received, and 
transmits said telephone card receipt message via 
said wireless communication means to sad first 
electronk; wallet; and wherein sad first electrons 
wallet, upon receiving said telephone card receipt 
message, deletes said electronic telephone card 
stored in said second storage means thereof. 

53. A mobile electronic commerce system according to 
daim 26, wherein a first electronic wallet generates 
a ticket transfer certificate message confimiing that 
said electronic ticket stored in sad second storage 
means is to be transferred to a second electronic 
wallet, and transmits said ticket transfer certifkate 
message via wireless communication means to 
said second electronic wallet; wherein sad secord 
electronic wallet transmits, to said service provding 
means, said ticket transfer certificate message that 
is received; wherein said service providing means 
performs an examination to establish the valdity of 
said ticket transfer certificate message that is 
received, and transmits, to said second electronic 
wallet, an electronic ticket that is desaibed in sad 
ticket transfer certificate message; and wherein 
said second electronic wallet stores, in sad second 
storage means thereof, said electronic ticket tiiat is 
received. 

54. A rTKsbile electronic commerce system according to 
claim 53. wherein sad second electronic wallet, 
upon rec&ving sad ticket ti-ansfer certifkate mes- 
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sage, generates a ticket receipt message confirm- 
ing that said ticket transfer certificate message has 
been received, and transmits said ticket receipt 
message via said wireless communication means 
io said first eiectrorac wallet; and wherein said first 
electronic wallet, upon receiving said ticket receipt 
message, deletes saki electronic ticket stored in 
said second storage means thereof. 

55. A mobile electronic commerce system according to 
claim 11. wherein said electronic wallet generates 
and then transmits, to said service providing 
means, an electronic payment card installation 
request message requesting the instatlatnn of an 
electronic payment card; wherein said service pro- 
vkJing means, upon receiving said payment card 
installation request message, communicates with 
said payment card issuing means and receives 
therefrom an electronic payment card installation 
request message indrcating that sakj service pro- 
vkling means is requested to install an electronic 
payment card: wherein said service providing 
means, upon receiving saki request ntessage. gen- 
erates an electronic paymertt card using payment 
card information that is generated by sakl payment 
card Issuing means and is included in said elec- 
tronic payment card installation request message, 
and transmits said electronic payment card to said 
electronic wallet; and wherein said electronic wal- 
let, upon receiving sakj electronic payment card 
stores said electronic payment card in said second 
storage means thereof. 

56. A mobile electronic cormierce syst^ according to 
claim 55. wherein sakl electronk: payment card 
installation request message includes electronic 
payment card installation information that is 
entered by input means for sad electronic wallet 
and that uniquely desabes an electronic payment 
card that is to be installed. 

57. A mobile electronic commerce system according to 
claim 15. wherein said electronic wallet generates 
and then transmits, to said service providing 
means, an electrons telephone card installation 
request message for requesting the installation of 
an electronk: telephone card; wherein sakJ service 
provkiing means, upon receiving said telephone 
card installation request message, communicates 
with sad telephone card issuing means, and 
receives therefrom an electronk: telephone card 
installation request message indicating that said 
sefM'tce provkling means is to install an electronic 
telephone card; wherein sati service providing 
means, upon receiving sakj request message, gen- 
erates an electronic telephone card using tele- 
phone card information that is generated by said 
telephone card issuing means and that is included 


in said electror^c telephone card installation 
request message, and transmits sad electronic tel- 
ephone card to said electronic wallet; and wherein 
sad electronic wallet, upon receiving sad elec- 
s - tronic telephone card, stores said electronic tele- 
phone card in sad second storage means thereof. 

58. A mobile electronic commerce system according to 
claim 57. wherein said electronic telephone card 

10 installatdn request message includes sad elec- 
tronic telephone card installatdn information that is 
entered by input means for sad electronic wallet 
ard that uniquely desaibes an electronic telephone 
card that is to be installed. 

15 

59. A mobile electronk: commerce system according to 
daim 19, wherein said electronic wallet generates 
ard then transmits, to said service provding 
means, an electronic ticket installatdn request 

20 message requesting the installation of an electronic 
ticket; wherein sad service providing means, ipon 
receiving sad tk:ket installation request message, 
communicates witii sad ticket issuing means, and 
receives therefrom an electronic ticket installatdn 

25 request message indicating that sad service pro- 
viding means is to install an electronic ticket; 
wherein sad servde providing means, upon receiv- 
ing sad request message, generates an electronic 
ticket using ticket information tiiat is generated by 

30 sad ticket issuing means and is included in sad 
electronic ticket installation request message, and 
transmits sad electronic ticket to sad electronic 
wallet; ard wherein said electronic wallet ipon 
receiving sad electronic ticket, stores sad elec- 

35 tronic ticket in sad second storage means thereof. 

60. A mobile electronic commerce system according to 
daim 59, wherein said electronic ticket installation 
request message indudes sad electronk; ticket 

40 installatdn information that is entered by input 
means for sad electronic wallet and that uniquely 
descrbes an electronic ticket that is to be installed. 

61 . A mobile electronic commerce system according to 
45 daim 55. wherein said electronic payment card 

installation information, said electronic telephone 
card installatdn irrformation or said electronk: ticket 
installation information consists of first identification 
information desaibing a type of electronic payment 

so card, a type of electronic telephone card or a type of 
^ectronic ticket, and second dentification informa- 
tion that unquely desaibes an electronic payment 
card, an electronic telephone card or an electronic 
ticket, of a type described using said first dentif ica- 

55 tion informatdn, that is to be installed: and wherein 
sad second dentifdation information is informatdn 
generated at random. 


192 


383 


EP0 950 968 A1 


384 


62. A mobile electronic commerce system according to 
claim 61 . wherein said first identification information 
and said second identification information are rep- 
resented by 8-digit numerals and 32-digit numerals. 

63. A mobile electronic commerce system according to 
claim 55. wherein an object whereon or wherein 
said electronic payment card installation informa- 
tion, said electronic telephone installation informa- 
tion or said electronic ticket installation Information 
is printed or engraved is employed as sales distrbu- 
tion means or transfer means for said electronic 
payment card, said electronic telephone card or 
said electronic ticket. 

64. A mobile electronic commerce system according to 
claim 55. wh^ein a recording medium on which 
said electronic payment card installation informa- 
tion, said electronic telephone installation informa- 
tion or said ^ectronic ticket Installation information zo 
is stored is employed as sales distribution means or 
transfer means for an electronic payment card, an 
electronic telephone card or an electronic ticket. 

65. A mobile electronic commerce system according to ss 
claim 28, wherein said service providing means 
generates and then transmits, to said electronic 
wallet, a nrxxjification command message for the 
modification of the contents of said electronic ticket; 
and saki electronk; wallet, upon receiving said mod- 30 
ifkration command message, updates said elec- 
tronk: ticket stored in said second storage means to 
provide a new electronic ticket as is described in 
said modrfk:ation command message. 

35 

66. A mobile electronic commerce system according to 
claim 28, wherein saki service providing means 
generates and then transmits, to saki electronk; 
wallet, a nKXiifbation notificatbn message for tine 
modif icatk)n of the contents of sakJ electronic ticket: 4o 
wherein sakl electronic wallet, upon receiving said 
nrK>drficatk3n notificatk)n message, generates and 
then transmits, to said service providing means, a 
reaction selection message acknowledging receipt 

of the message for the nrxxjification of saki contents as 
of sakJ electronic ticket; wherein sakj service pro- 
vkling means, upon receiving said reaction selec- 
tion message, generates and then transmits, to said 
electronk: wallet, a nrxxJification command mes- 
sage Instructing the modf icatk)n of said contents of so 
sakj electronic ticket; and wherein saki electronk: 
wallet, upon receiving saki modrficatbn command 
message, updates sakj electronk; tk:ket stored in 
sakJ second storage means to provide a new elec- 
tronic tkitet that Is described in sakl modification 55 
command message. 

67. A mobile electronic commerce system according to 


claim 28. wherein said service provkjing means 
generates and then transmits, to sakj electronic 
wallet, a modif k:ation notification message for the 
modification of the contents of said electronic ticket; 
wherein sad electrorac wallet, upon receiving said 
nK)dificatk)n rxitification message, generates and 
then transmits, to sad service providing means, a 
reactbn selection message requesting a refund for 
said electronic ticket; wherein sakj service provid- 
ing means, ipon receiving sakj reaction selection 
message, communicates with sakj settlement 
processing means to issue a refund for sakj elec- 
tronic tkitet and generates and then transmits, to 
said electronic wallet, a refund receipt message 
indicating that a refund process has been com- 
pleted; and wherein said electronic wallet, upon 
receiving sakj refund receipt message, deletes sad 
electronic tk:ket from sad second storage means. 

68. A nfK)bile electronic commerce system according to 
daim 21, wherein a computer system in sad serv- 
k:e provding means comprises: 

user information processing means for commu- 
nicating witii said electronic wallet and for 
processing infbrmatdn stored in user informa- 
tion storage means: 

merchant information processing means for 
communicating with sad electronic payment 
card settiement means, said electi-onlc tele- 
phone card settlement means or sad elec- 
tronic ticket examination means, and for 
processing information stored in merchant 
information storage means; 
settlement processor information processing 
means for communicating with said electronk; 
settlement processing means, and for process- 
ing information stored in settiement processor 
information storage means; 
payment card issuer information processing 
means for communicating with said payment 
card issuing means, and for processing infor- 
mation stored in payment card issuer informa- 
tion storage means; 

telephone card issuer information processing 
means for communicating with said telephone 
card issuing means, and for processing infor- 
matfon stored in telephone card issuer informa- 
tfon storage means: 

ticket issuer information processing means for 
communicating witii said ticket issuing means, 
and for processing information stored in ticket 
Issuer information storage means: 
service director information processing means 
for communicating with said user information 
processing means, said merchant Information 
processing means, sad settiement processor 
information processing means, sad payment 
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card issuer irrformation processing means, said 
telephone card issuer information processing 
means and said ticket issuer information 
processing means, and for Interacting with 
those means while processing data during a 
service providing process; and 
sen/ice manager information processing 
means for controlling the generation and the 
deletion of said user Information processing 
means, said merchant information processing 10 
means, said settiement processor infomnation 
processing means, said payment card issuer 
Information processing means, said telephone 
card issuer information processing means, said 
ticket issuer information processing means and is 
said service director information processing 
means. 

69. A wdbWe electronic commerce system according to 
daim 34. wherein scud electronic wallet generates 20 
and tiien transmits, to said service providing 
means, a payment card registration request mes- 
sage requesting that said service providing means 
register, as an electronic payment card that is to be 
used by the owner of said electronic wallet, an elec- 2s 
tronic payment card ttiat is stored in said second 
storage means; and wherein said service providing 
means, upon receiving saki payment card registi^- 
tion request message, registers sakJ electronic pay- 
ment card for use in said service director 30 
information storage means. 

70. A mobile electronic commerce system according to 
claim 69, wherein sakJ service provkling means, 
upon receiving saki payment card registiBtion 35 
request message, generates and then transmits, to 
sad electronic wallet, a registered card certificate 
confirming that sakj electronic payment card has 
been registered for use; and wherein said elec- 
tronic wallet stores, in said secorxj storage mear^. 4C 
sakj registered card certificate that is received and 
changes tiie state of said electronic payment card 

to the usable state. 

71. A mobile elect'onic commerce system according to 45 
claim 34. wherein said electronic wallet generates 
and tiien transmits, to said service providing 
means, a telephone card registration request mes- 
sage requesting that service provkiing means reg- 
ister, as an electronic telephone card that is to be so 
used by the owner of said electronic wallet, an elec- 
tronic telephone card that is stored in sw6 second 
storage means; and wherein said service providing 
means, upon receiving sad telephone card regis- 
tration request message, registers saki elecb-onic ss 
telephone card for use in said service director infor- 
mation storage means. 


72. A mobile electronic commerce system according to 
claim 71, wherein said service provkling mear^, 
upon receiving said telephone card registration 
request message, generates and then tiansmrts, to 

- said electr<3nic wallet.-a registered card certificate 
confirming that said electronic telephone card has 
been registered for use; arxJ wherein said elec- 
tronic wallet stores, in said second storage means, 
sad registered card certificate that is received and 
changes the state of said electronk; telephone card 
to the usable state. 

73. A mobile electronk; commerce system according to 
daim 34. wherein said electronic wallet generates 
and then transmits, to sakJ service prwkling 
means, a ticket registration request message 
requesting that sad second storage means regis- 
ter, as an electronic ticket that is to be used by ttie 
owner of said electi^onic wallet, an electronic ticket 
that is stored in sad second storage means: and 
wherein sad service providing means, upon receiv- 
ing said ticket regstration request message, regis- 
ters sad electronic ticket for use in sad service 
director information storage means. 

74. A mobile electronk: commerce system according to 
daim 73. wherein sad service provding means, 
upon receiving sad tk:ket registration rec^est mes- 
sage, generates and then transmits, to sad elec- 
tronic wallet a registered ticket certificate that 
verifies sad electronic ticket has k>een registered 
for use; and wherein said electronk: wallet stores, in 
sad secord storage means, said registered ticket 
certificate that is received, and changes the state of 
sad electronic tk:ket to tiie usatsle state. 

75. A mobile electronk: commerce system according to 
daim 28, wherein said electronic payment card 
comprises: 

a payment card program: 
presented card information describing the con- 
tents of said electronic payment card when 
issued; and 

a card certificate indicating that sad electronic 
payment card is autiierrtic. Sad payment card 
program includes: 

electronic payment card state management 
informatdn; and 

payment card program data for specifying an 
operation to be performed by sad electronic 
payment card. The digital signature of the 
owner of said service provding means is pro- 
vded for sad presented card information. 

76. A mobile electronk: commerce system according to 
daim 75, wherein said payment card program 
indudes a card signature private key tiiat is 
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empto/ed for a digital signature prcsvided for said 
electronic payment card, and wherein said card 
certificate is a public key certificate verifying that a 
card signature put^lic key that is paired with said 
card signature private key is authentic. - . 5 

77. A mobile electronic commerce system according to 
claim 75, wherein a settlement program module for 
said electronic payment card includes two crypto- 
graphic keys, an accounting device authentication 10 
private key and a card authentication public key, 
and wherein said payment card program includes 

an accounting devrce authentication public key, 
which is paired with said accounting device authen- 
tication private key, and a card authentication pri- 15 
vate key, which is paired with said card 
authenticatk}n public key. 

78. A mobile electronic commerce system according to 
claim 75. wherein said payment card program data 20 
includes: 

a transaction module program for specifying 
the procedures to be used for message data 
that are exchanged by said electronic wallet 2s 
and said electronic payment card settlement 
means; 

a display module program for specifying the 
manner in which said electronic payment card 
is to be displayed; and 30 
representative component information for said 
electronic paymerrt card, 
wherein a cerrtral processing unit in sakJ elec- 
tronic wallet processes, in accordance with 
said transaction nrxxJule program for saki elec- 35 
tironic payment card, said message data that 
are exchanged with said electronic payment 
card settlement means, and displays said rep- 
resentative component infornnation in accord- 
ance wHh saki display module program of said 40 
electronic payment card, so that on display 
means saki electronic payment card is dis- 
played in said electi^onic wallet 

79. A mobile electronic commerce system according to 45 
claim 34, wherein a tenplate program that consti- 
tutes a model for said electronic payment card is 
stored in saki payment card issuer information stor- 
age means for saki service provding means. 

50 

80. A mobile electronic commerce system according to 
claim 79, wherein said template program for said 
electronk; payment card includes: 

a transaction module program for saki elec- 55 

tronic payment card; 

a display module prog'am; and 

representative component information. 


Therefore, various types of electronic payment 
cards can be safety issued. 

81. A mobile electronic commerce system according to 
- - daim 28. wherein said -electronic telephone card 

comprises: 

a telephone card program; 
presented card information describing tiie con- 
tents of said electronic telephone card when 
issued; and 

a card certificate indicating that said electronic 
telephone card is authentic, 
wherein sad telephone card program includes: 
electronic telephone card state management 
information; and 

telephone card program data for specifying an 
operation to be performed by sad electrons 
telephone card, and 

wherein the digital signature of the owner of 
sad service provding means is provded for 
sad preserrted card information. 

82. A mobile electronic commerce system according to 
daim 81, wherein said telephone card program 
includes a card signature private key that is 
employed for a digital signature provded for sad 
electrond telephone card, and wherein sad card 
certificate is a publk: key certificate verifying tiiat a 
card signature public key ttiat is paired with sad 
card signature private key is authentic. 

83. A mobile electronic commerce system according to 
claim 81. wherein a settlement program nrodule for 
said electronic telephone card includes two crypto- 
graphk: keys, an accounting devde authentication 
private key and a card authentication public key, 
and wherein said telephone card program includes 
an accounting device authentication put)lic key. 
which is paired with said accounting device authen- 
tication private key. and a card authentdation pri- 
vate key. which is paired with sad card 
authenticatdn public key 

84. A mobile electronic commerce system according to 
claim 81. wherein said telephone card program 
data includes: 

a transaction module program for specifying 
the procedures to be used for message data 
that are exchanged by said electronic wallet 
and sad electronic telephone card settlement 
means; 

a display module program for specifying the 
manner in which said electronic telephone card 
is to be displayed; and 

representative component information for sad 
electronic telephone card, and 
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wherein a central processing unit in said elec* 
tronic wallet processes, in accordance with 
said transaction module program for said elec- 
tronic telephone card, said message data that 
are exchanged with said electronic telephone 5 
card settlement means, and displays said rep- 
resentative component informatics in accord- 
ance with said display module program for said 
electronic telephone card, so that on display 
means said electronic telephone card is dts- w 
played in said electronic wallet. 

85. A nnobile electronic commerce system according to 
daim 34, wherein a template program that consti- 
tutes a model for said ^ectronic telephone card is is 
stored in said telephone card issuer information 
storage means for said service providing means. 

86. A mobile electronic oonrmerce system according to 
claim 85, wherein said template program fa said 20 
electronic telephone CEud includes: 


a transaction nKxJule program for said elec- 
tronic telephone card; 
a display nfKXiule program; and 
representative component information. 


87. A mcfoWB electronic commerce system according to 
claim 28, wherein said electronic ticket comprises: 


2S 


30 


a ticket program; 

presented tk:ket information describing the 
contents of said electronic ticket when issued: 
and 

a ticket certificate indicating that said electronic 35 
ticket is authentic. 

wherein said ticket program includes: 
electronic ticket state management informa* 
tion; and 

ticket program data for specifying an operation 40 
to be performed by said electronic ticket and 
wherein the dtgltat signature of the owner of 
said service prosnding means is provided for 
said presented ticket information. 

45 

88. A mobile electronic commerce system according to 
claim 87, wherein said ticket program includes a 
tfoket signature private key that is errployed for a 
digital signature provided for said electronic ticket 
and wherein said ticket certificate is a puUic key so 
certificate verifying that a ticket signature public key 
that is paired with said ticket signature private key is 
authentic. 

89. A mobile electronic commerce system according to ss 
claim 87. wherein an exanr^natbn program module 

for said electronic ticket includes two cryptographic 
keys, a gate authentication private key and a ticket 


authentication public key. and wherein said ticket 
card program includes a gate authentication public 
key. which is paired with said gate authentication 
private key. and a ticket authentication private key, 
which.is paired with said^ticket authentication public 
key. 

90. A mobile electronic commerce system according to 
claim 87, wherein said ticket program data includes: 

a transaction ntodule program for specifying 
the procedures to be used for message data 
that are exchanged by said electronic wallet 
and said electronic ticket examination means; 
a display nrxxiule program for specifying the 
manner in which said electronic ticket Is to be 
displayed; and 

representative component information for said 
electronic ticket, and 

wherein a central processing unit In said elec- 
tronic wEdtet processes, in accordance with 
said transaction module program for said elec- 
tronic ticket said message data that are 
exchanged with said electronic ticket examina- 
tion means, and displays said represernative 
component information in accordarKe with said 
display module program for said electronic 
ticket so that on display means said electronic 
ticket Is displayed in said electronic wallet 

91. A mobile electronic commerce system according to 
claim 34. wherein a template prog-am that consti- 
tutes a model for said electronic ticket is stored in 
said ticket issuer information storage means for 
said service providing means. 

92. A mobile electronic commerce system according to 
claim 91, wherein said template program for said 
electronic ticket includes: 

a transaction module program for said elec- 
tronic ticket: 

a display module program; and 
representative corrponent information. 

93. A mobile electronic commerce system according to 
claim 39, wherein identification information that 
describes a payment method selected by said input 
means for said electronic wallet is Included in said 
payment card application message issued by said 
electronic wallet when requesting the purchase of 
an electronic payment card. 

94. A mobile electronic commerce system according to 
claim 79. wherein said electronic payment card 
Issuance request message or said electronic pay- 
ment card installation request message includes 
template program identification Information for des- 
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ignating. in the order to be used (or the generation 
of an electronic payment card, one of a plurality of 
template programs that are stored in said payment 
card issuer information storage means. 

95. A mobile electronic commerce system according to 
claim 78. wherein said electronic payment card 
issuance, request message or said electronic pay- 
ment card installation request message includes 
representative component information describing io 
the representative conponent information to be 
used for an electronic payment card that is to be 
generated. 

96. A mot^ile electronic commerce system according to is 
claim 76, wherein said electronic wallet generates 
and then transmits, to said service providing 
means, a payment card registration request mes- 
sage requesting that said service providing means 
register, as an electronic payment card that is to be 20 
used by the owner of said electronic wallet, said 
electronic payment card staed in said second stor- 
age means for said electroruc wallet; wherein said 
sendee providing means, upon receiving said pay- 
ment card registration request message, newly ss 
generates, for said electronic payment card, a card 
signature private key, a card signature pM'ic key 
and a registered card certificate for authenticating 
said card signature public key. registers s^id elec- 
tronic payment card for use in said service director 30 
infamation storage means, and then transmits, to 
said electronic wallet said card signature private 

key and said registered card certificate: and 
wherein said electronic wallet updates said card 
signature private key and said registered card cer- 35 
tificate that are in storage by replacing them with 
those that have newly been received, and changes 
said state management infbrnrHtion for said elec- 
tronic payment card to a usable state. 

40 

97. A mobile electronic commerce system according to 
claim 26, wherein said electronk: wallet employs an 
electronic payment card, which is selected by input 
means for said electronic wallet from among those 
stored in said second storage means, to generate a 45 
miaocheck message that verifies a payment cor- 
responding to an amount entered by said input 
means, and transmits saki micro-check message to 
sakl electronk: payment card settlement means. 

50 

98. A mobile electronic commerce system according to 
claim 28. wherein sakJ electronk: wallet employs an 
electronk; payment card, whrch is selected by input 
means of saki electronic wallet from among those 
stored in said second storage means, to generate a 55 
payment offer message that offers a paynr>ent corre- 
sponding to an anxxint entered t>y saki input 
means, and transmits said payment offer message 


to sab electronic payment card settlement means; 
wherein said electronic payment card settlement 
means, upon receiving said payment offer mes- 
sage, generates and then transacts, to said elec- 
tronic wallet, a payment offer response message 
that assesses a charge corresponding to an 
amount entered by input means for said electronic 
payment card settlement means: wherein sakJ elec- 
tronic wallet upon receiving sakJ payment offer 
response message and if said assessed charge is 
equal to or smaller than an amount entered by sakj 
input means for said electronic wallet, subtracts 
said assessed charge from a remaining amount 
stored on saki electronk; payment card, and gener- 
ates and then transmits, to saki electronic payment 
card settlement means, a micro-check message 
valdating a payment corresponding to said 
assessed charge; wherein sakJ electronk; payment 
card settlement means stores saki received micro- 
check message in said second storage means for 
said electronic payment card settlement means, 
and generates and then transmits, to sati elec- 
tronic wallet a receipt message confirming that 
said miao-check message has been received: and 
wherein saki electronic wallet stores said received 
receipt message in said second storage means for 
said electronic wallet. 

99. A mobile electronic commerce system according to 
claim 28, wherein said paymertt offer message 
includes: 

a payment amount entered by said input 
means of said electronic wallet; 
presented card infbrmatbn and a registered 
card certifk;ate for said electronk: payment 
card; and 

state management information to which a dig- 
ital signature has been added using said card 
signature private key 

100. A mobile electronic commerce system according to 
daim 76, wherein sakj micro-check message 
includes: 

a payment anx>unt: 

an amount remaining stored on said elechx)nic 
payment card; 

identification information for said electronic 
payment card settlement means; and 
identificatk>n information for the owner of sad 
electronic payment card settlement means. 
Further, a digital signature is provkied for saki 
micro-check message by using saki card sig- 
nature private key for said electronic payment 
card. 

101 .A mobile electronic commerce system according to 
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claim 100. wherein the digital signature of the 
owner of said electronic wallet is also provided for 
said micro-check message. 

102. A mobile electronic commerce system according to 
claim 40, wherein said micro-check message 
includes a micro-check issuing number represent- 
ing the order in which micro-check messages are 
generated by said electronic payment card. 

103. A mobile electronic commerce system according to 
claim 98, wherein, at a time designated by said 
service providing means, said electronic payment 
card settlement means generates an ipload data 
message that includes data stored in said second 
storage means for said electronic payment card 
settlement means, and then transmits sakl upbad 
data message to sakJ service providing means; 
wherein sakj service provkiing means, upon receiv- 
ing sas6 upload data message, examines the valkl- 
rty of a mk:ro-check that is included in sad upload 
data message by oonrparing sati micro^heck with 
registration information for saki electronic payment 
card that is registered in said service director infor- 
mation storage means, and generates and then 
transmits, to said electronic payment card settle- 
ment means, an update data message that 
includes update data for sakJ second storage 
means for sakl electronic payment card settlement 
means; and wherein said electronic payment card 
settlement means extracts saki update data from 
saki update data message that is received, arrd 
updates data stored in said second storage means. 

104. A mobile electronic commerce system according to 
claim 28, wherein a first electronic wallet generates 
a payment card transfer offer message containing 
an offer to transfer, to a second electronic wallet, an 
electronic payment card that is stored in said sec- 
ond storage means, and then transmits said pay- 
ment card transfer offer nr>essage. via said wireless 
communication means, to said second electronic 
wallet; wherein said second electronk; wallet, upon 
receiving said payment card transfer offer mes- 
sage, generates a payment card transfer offer 
response message indicating that the contents of 
saki payment card transfer offer message are 
accepted, and then transmits said payment card 
transfer offer response message, via said wireless 
communication means, to said first electronic wal- 
let; and wherein said first electronic wallet upon 
receiving saki payment card transfer offer response 
message, generates and then transmits, to said 
second electronic wallet, a payment card transfer 
certificate message confirming the transfer of said 
electrorvc payment card to said second electronic 
wallet 


105. A mobile electronic commerce system according to 
claim 104. wherein said payment card transfer offer 
message includes: 

5 - presented card information, and a card certifi- 

cate or a registered card certificate for saki 
electronic payment card; and 
state management information having an 
added digital signature prepared using a card 

10 signature private key 

106. A mot)ile electronic commerce system according to 
daim 104, wherein said payment card transfer offer 
message includes a public key certificate for the 

15 owner of said first electronic wallet; wherein a dig- 
ital signature of said owner of said first electronic 
wallet is provided for said payment card transfer 
offer message; wherein saki payment card transfer 
offer response message includes a public key cer- 
20 tificate for the owner of said second electronic wal- 
let; wherein a digital signature of saki owner of said 
second electronic wallet is provkied for said pay- 
ment card transfer offer message; wherein saki 
payment card transfer certificate message includes 
25 identification infbrmatk)n for said public key certifi- 
cate of said owner of said first electronic wallet and 
identification informatk)n for said public key certifi- 
cate of said owner of said second electronic wallet; 
and wherein a digital signature using a card signa- 
ge? ture private key for said electronic payment card 
arKi a digital signature of saki owner of said first 
electronic wallet are provided for said payment card 
transfer certificate message. 

35 1 07, A mobile electronic commerce system according to 
daim 42. wherein identification information that 
describes a payment method selected by said input 
means of said electronic wallet is induded in saki 
telephone card application message issued by said 

40 electronic wallet when requesting the purchase of 
an electronic telephone card. 

108. A mobile electronic commerce system according to 
daim 85, wherein said electronic telephone card 

45 issuance request message or said electronic tele- 
phone card installation request message indudes 
template program identification information for des- 
ignating, tbllQwing the order that is to be used for 
the generation of electronic telephone cards, one of 

50 a plurality of template programs that are stored in 
said telephone card issuer information storage 
means. 

109. A mobile electronic commerce system according to 
55 daim 84. wherein said electronic telephone card 

issuance request message or said electronic tele- 
phone card installation request message indudes 
representative component information describing 
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representative component information to be used 
tor an electronic telephone card that is to be gener- 
ated. 

1 10. A nriobile electronic commerce system according to s 
claim 82, wherein said electronic wallet generates 
and then transmits, to said service providing 
means, a telephone card registration request mes- 
sage requesting that said service providing means 
register, as an electronic telephone card that is to io 
be used by the owner of said electronic wallet said 
electronic telephone card stored in said second 
storage means for said electronic wallet; wherein 
said service providing means, upon receiving said 
telephone card registration request message, is 
newly generates, for said electronic telephone card, 

a card signature privaAe key, a card signature piislic 
key and a registered card certificate for confirming 
said card signature public key. registers for use said 
electronic telephone card in said service director so 
information storage means, and then transmits, to 
said electronic wallet said card signature private 
key and said registered card certificate; and 
wherein said electronic wallet updates said card 
signature private key and said registered card cer- ss 
tificate that are in storage by replacing tiiem with 
those that have newly been received, and changes 
said state management information for said elec- 
tronic telephone card to a usable state. 

30 

111. A nrKibile electronic commerce system according to 
claim 28. wherein said electronic wallet employs an 
electronic telephone card, which is selected by 
input means for said electi'onic wallet from among 
those stored in said second storage means, to gen- as 
erate a micro-check message verifying a payment 
corresponding to an amount entered by said input 
means, and transmits said micro-check message to 
said electronic telephone card settlement means. 

40 

112. A nrKJbile electronic commerce system accordng to 
claim 28. wherein said electronic wallet employs an 
electronic telephone card, which is selected by 
input means for said electronic wallet from among 
those stored in said second storage means, to gen- 4s 
erate a micro-check call request message request- 
ing a radio communication service in order to 
communicate with a side that is designated by said 
input means, and transmits said micro-check call 
request message to said electronic telephone card so 
settleoYent means; wherein said electronic tele- 
phone card settiennent means, upon receivir^ said 
miao-check call request message, generates arxl 
then transacts, to said electronic wallet a micro- 
check call response message for an anraunt ss 
charged that corresponds to a communication fee; 
said electronic wallet upon receiving saki micro- 
check call response message, subtracts the 


amount charged from the remaining amount stored 
on said electronic telephone card, and generates 
and then transmits, to said electronic telephone 
card settlement means, a telephone micro-check 
message verifying the payment of an amount corre- 
sponding to said amount charged; wherein said 
electronic telephone card settlement means, upon 
receiving said telephone micro-check message, 
generates and then transmits, to said electronic 
wallet, a receipt message confirming the receipt of 
said telephone micro-check message; and wherein 
said electronk; wallet stores said received receipt 
message in said second storage means for said 
electronic wallet. 

113. A mobile electronic commerce system according to 
daim 28. wherein said electronic telephone card 
settlement means, when radio wireless communi- 
cation sen^ice is prcvkJed. generates and then 
transmits, to said electronic wallet a communk:a' 
tion fee charge message for an anrKXjnt charged 
tiiat corresponds to an additional communication 
fee; wherein sakJ electronic wallet upon receiving 
said communication fee charge message, subtracts 
said amount ttiat is charged from an amount 
remaining on said electronic telephone card, and 
generates and tiien transmits, to said electronic tel- 
ephone card settlement means, a new telephone 
micro-check message verifying payment of tie total 
amount charged; wherein said electronic telephone 
card settlement means generates and then trans- 
mits, to said electronic wallet, a receipt message 
confirming that said telephone micro-check mes- 
sage has been received; wherein said electronic 
wallet updates a receipt message stored in said 
second storage means for said electronic wallet tiy 
storing therein said receipt message that is newly 
received; and wherein said electrons telephone 
card settiemerrt means, when provision of said 
radio wireless communication service is temii- 
nated, stores the latest telephone micro-check 
message in said second storage means for said 
electronic telephone card settiement means. 

1 14. A mobile electronic commerce system according to 
daim 112 or 113. wherein said micro-check call 
request message includes: 

identification information for said side that is 
designated by said input means of sakl elec- 
tronic wallet; 

presented card information and a registered 
card certificate for said electronic telephone 
card; and 

state management information accompanied 
by a digital signature ttiat is provkied by using a 
card signature private key. 
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1 1 5.A mobile electronic commerce system according to a telephone card transfer offer message offering to 

claim 82, wfierein said telephone micro-check mes- transfer, to a second electronic wallet, an electronic 

sage includes: telephone card that is stored in said second storage 

means, and transmits said telephone card transfer 

a payment anraunt; s offer message via said wireless communication 

a amount remaining stored on said electronic means to said second electronic wallet: wherein 

telephone card: said second electronic wallet, upon receiving said 

identification information for said electronic tel* telephone card transfer offer message, generates a 

ephone card settlement means: and telephone card transfer offer response message 

identification infomnation for the owner of said io indicating that the contents of said telephone card 

electronic telephone card settlement means. transfer offer message are accepted, and then 

and transmits said telephone card transfer offer 

wherein a digital signature is provided for said response message via said wireless communica- 

telephone micro-check message by using said tion means to said first electronic wallet: and 

card signature private key of said electronic tel- is wherein said first electronic wallet, upon receiving 

ephone card. said telephone card transfer offer response mes- 
sage, generates and then transmits, to said second 

116^ mobile electronic commerce system according to electronic wallet, a telephone card transfer certifi- 

claim 115. wherein not only sak^ digital signature cate message confirming the transfer of said etec- 

using sakl card signature private key for said elec- zo tronic telephone card to said second electronic 

tronic telephone card, but also the digital signature wallet, 
of the owner of said electronic wallet is provkied for 

sati telephone micro-check message. 1 20.A mobile electronk; oomnr>erce system according to 

daim 119. wherein said telephone card transfer 

117.A mobile electrons commerce system according to 2S offer message includes: 
daim 43, wherein saki tel^hone micro-check mes- 
sage includes a telephone micro^heck issuing presented card informatran and a card certifi- 
number representing the order in which telephone cate or a registered card certificate for sakl 
miaoK;heck messages are generated by said elec- electrons telephone card; and 
tronic telephone card. 30 state management information accompanied 

by a digital signature^added by using a card 

118^ mobile electronk; commerce system according to signature private key 
claim 113, wherein, at a time designated by said 

service providing means, saki electronic telephone 1 21 .A mobile electronk; convnerce system according to 
card settlement means generates an ipload data 35 daim 119, wherein saki telephone card transfer 
message that includes data stored in said second offer message indudes a public key certificate for 
storage means for said electronic telephone card the owner of sakI first electronic wallet: the digital 
settlement means, and then transmits saki uptoad signature of saki owner of sad first electronic wallet 
data message to saki service provding means: is provkied for saki telephone card transfer offer 
wherein saki service provkiing means, upon receiv- 40 message: wherein said telephone card transfer 
ing said upload data message, examines the vaiki- offer response message includes a public key cer- 
rty of a telephone micro-check that is induded in tificate for the owner of said second electronic wal- 
sad ipload data message by comparing sad tele- let; wherein the digital signature of said owner of 
phone micro-check with registration information for sad second electronk; wallet is provided for sad 
sad electronic telephone card that is registered in 45 telephone card transfer offer message; wherein 
sad service director information storage means. sad telephone card transfer certifk:ate message 
and generates and then transmits, to said elec- indudes dentifk;ation information for said public 
tronic telephone card settlement means, an update key certificate for sad owner of sad first electronic 
data message that includes update data for said wallet and dentification information for sad public 
second storage means for said electronic tele- so key certificate for sad owner of sad second elec- 
phone card settlement means; and wherein said tronic wallet: and wherein a digital signature using a 
electronic telephone card settlement means card signature private key for said electronic tele- 
extracts sad update data from sad update data phone card and the digital signature of said owner 
message that is received, and updates data stored of said first electrons wallet are provded for sad 
in said second storage means. ss telephone card transfer certificate message. 

119^ mobile electrons commerce system according to 122.A mobile electronk; commerce system according to 

daim 28. wherein a first electronic wallet generates daim 45. wherein dentification informatdn that 
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describes a payment method selected by said input 
means of said electronic wallet is included in said 
ticket application message issued by said electronic 
wallet when requesting the purchase of an elec- 
tronic ticket. 


123. A mobile electronic commerce system according to 
claim 91. wt>erein said electronic ticket issuance 
request nriessage or said electronic ticket installa- 
tion request message includes template program io 
identification information for designating, following 

the order that is to be used for the generation of 
electronic tickets, one of a plurality of template pro- 
grams that are stored in sakj ticket issuer informa- 
tion storage means. is 

124. A mobile electronic commerce system according to 
claim 90. wherein said electronk; ticket Issuance 
request message or saki electronic ticket installa- 
tion request message includes representative com- bo 
ponent informatkxi describing representative 
component information for an electronic ticket that 

is to be generated. 

1 25. A mobile electronic commerce system according to ss 
claim 88. wherein said electronic wallet generates 
and then transmits, to sakl sennce provkling 
means, a registration request message 
requesting that saki service providing means regis- 
ter, as an electronic ticket that is to be used by the so 
owner of said electronic wallet said electronic ticket 
stored in said second storage means for said elec- 
tronic wallet; wherein sakJ service providing means, 
upon receiving saki ticket registratlOT request mes- 
sage, newty generates, for sakj electronic ticket, a 35 
ticket signature private key, a ticket signature publk: 
key and a registered ticket certificate for verifying 
said ticket signature publk; key, registers sakJ elec- 
tronic ticket for use in said service director informa- 
tion storage means, and then transmits, to sakl 4o 
etectronk; wallet, said trcket signature private key 
and said registered ticket certifk)ate: and wherein 
sakJ electronic wallet updates sakl tk:ket signature 
private key and said registered ticket certificate that 

are stored by replacing them with those that have 45 
been newly received, and changes said state man- 
agement information tor said electronic ticket to a 
usable state. 

1 26. A mobile electronic commerce system according to 50 
claim 28. wherein said electronic wallet generates a 
ticket presenting message in which is designated 

an electronic tkitet that is selected, from among 
those stored in said second storage means, by 
Input means for said electronic wallet, and transmits 55 
said ticket presenting message to said electronk: 
ticket examinatfon means. 


127. A mobile electronic commerce system according to 
claim 126, wherein sakj electronic ticket examina- 
tion means, upon receiving said ticket presenting 
message, generates and then transmits, to said 
electronic wallet, a ticket examination message 
instructing the modification of said electronic ticket 
to a post-exan^ned state; wherein sakj electronic 
wallet. Mpon receiving said tki^t examinatfon mes- 
sage, changes said electronic ticket to said post- 
examined state, and generates and then transmits, 
to sad electronic ticket examination means, a ticket 
examination response message that describes the 
contents of the nrrodified electronic tktet; wherein 
said electronic ticket examinatfon means stores 
said received ticket examination response mes- 
sage in said second storage means for said elec- 
tY)nic ticket examination means, and generates and 
then transmits, to said electronic wallet, an exami- 
nation certif kate message certifying that said elec- 
tronic ticket has been examined; and wherein sakl 
electronic wallet staes sakJ received examination 
certificate message in sakl second storage means 
for said electronic wallet. 

128. A nrtobile eledronic commerce system according to 
claim 126. wherein said tk:ket presenting message 
includes: 

presented ticket information and a registered 
ticket certificate for said electronic ticket; and 
state management information accompanied 
by a digital signature provkled by using a ticket 
signature private key 

129. A mobite electronic commerce system according to 
claim 88. wherein said ticket examination response 
message includes: 

state management Information for sad elec- 
tronic ticket; 

identification Information for said electronk; 
ticket examination means: and 
identification information for the owner of said 
electronic ticket examination means, arxl 
wherein a digital signature is provded for said 
ticket examination response message by using 
said ticket signature private key for said elec- 
tronic ticket. 

130. A mobile electronic commerce system according to 
claim 1 29. wherein said ticket examination 
response message Includes Identification informa- 
tion for said electronic ticket examinatkxi means 
and identification information for the owner of sad 
electronk: ticket examination means, ard wherein 
said digital signature prepared using sad ticket sig- 
nature private key for said electronk; ticket and tiie 
cfigttat signature of the owner of sad electronic wat- 
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let are provided for said ticket examination 
response niessage. 

131 .A wobWe electronic commerce system according to 
claim~47. wherein said ticket examinatiorr response s ^ 
message includes a ticket examination number rep- 
resenting the order in which tidtet examination 
response messages are generated by said elec- 
tronic ticket. 

10 

IJZA mobile electronic commerce system according to 
claim 127. wherein, at a time designated by said 
servce providing means, said electronic ticket 
examination means generates an upload data mes- 
sage that includes data stored in said second stor- is 
age means for said electronic ticket examination 
means, and then transmits said upk)ad data mes- 
sage to said service provkiing means: wherein said 
servce provcling nrieans, upon receiving said 
upload data message, determines the validity of a 20 
tkk&i examination response that is included in said 
upload data message by comparing sakl ticket 
examination response with registration information 
for sakJ electronic ticket that is registered in said 
sen^ice director infbrmatkKi storage means, and 25 
generates and then trar^mits. to eakJ electronic 
ticket examination means, an update data message 
that includes update data for said second storage 
means for sakJ electronic ticket examination means; 
and wherein said electronic ticket examination 30 
means extracts said update data from sad update 
data message that is received, and updates data 
stored in said second storage means. 

1 33^ mobtl e electronic commerce system according to 35 
claim 28, wherein a first electronic wallet generates 
a ticket transfer offer message offering to transfer, 
to a second electronic wallet, an electronic ticket 
that is stored in said second storage means, and 
then transmits said ticket transfer offer message via 40 
said wireless communication means to said second 
electronic wallet; wherein said second electronic 
wallet upon receiving said tk:ket transfer offer mes- 
sage, generates a ticket transfer offer response 
message indicating the contents of said ticket trans- 45 
fer offer message are acceptable, and then trans- 
mits sakl ticket transfer offer response message via 
said wireless communication means to said first 
electronic wallet; and wherein said first electronic 
wallet, upon receiving said ticket transfer offer so 
response message, generates and then transmits, 
to said second electronic wallet a tk:ket transfer 
certificate message confirming the transfer of said 
electronic ticket to saki second electronic wallet. 

55 

134.A mobile electronic commerce system according to 
claim 133. wherein sakJ ticket transfer offer mes- 
sage includes: 


presented ticket information and a ticket certifi- 
cate or a registered ticket certificate for said 
electronic ticket: and 

state management information accompanied 
^-.(jy a (jigitaf signature that is added by using a 
ticket signature private key. 

135. A mobile electrons commerce system according to 
claim 133. wherein said ticket transfer offer mes- 
sage includes a public key certificate for the owner 
of said first electronic wallet; wherein the digital sig- 
nature of said owner of said first eiectrontc wallet is 
provided for sakj ticket transfer offer message; 
wherein said ticket transfer offer response message 
includes a public key certifkiate for the owner of 
said second electronic wallet; wher^n the digital 
si^ture of sakJ owner of said second electronic 
wallet is pxcvkied for said ticket transfer offer mes- 
sage; wherein said ticket transfer certificate mes- 
sage includes klentificatk)n information for sak^ 
public key certificate for said owner of sakl first 
electronic wallet and identification information for 
said pii>lic key certificate for said owner of said sec- 
ond electronic wallet; and wherein a digital signa- 
ture using a ticket signature private key for said 
electronic ticket and the digital signature of said 
owner of said first electronic wallet are provkled for 
said ticket transfer certificate message. 

136. A mobile etectronk: commerce system according to 
daim 39. wherein settiemerrt optk)n information for 
deciding which procedures to use for settiement is 
induded in said electronic payment card issuance 
request message, in said electronic telephone card 
issuance request message or in said electronic 
ticket issuance request message. 

1 37. A mobile electrons commerce system according to 
daim 136, wherein said sen/ice provkiing means, 
upon receiving sakl electronic payment card issu- 
ance request message, said electi^onic telephone 
card issuance request message or sakl electronic 
ticket issuance request message, generates and 
then transmits, to sakl electronic wallet, an elec- 
tronic payment card, an electronic telephone card 
or an electronic ticket before performing a price set- 
tlement in accordance witii said settlement option 
information. 

138. A mobile electronic commerce system according to 
daim 39, wherein saki service providing means, 
upon receiving sakl electronic payment card issu- 
ance request message, said electronic telephone 
card issuance request message or sakl electronic 
ticket issuance request message, generates and 
then transmits, to said electronic wallet, an elec- 
tronic payment card, an electronic telephone card 
or an electronic ticket, and a tenrporary receipt 
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message describing the contents of a settlement 
before performing a price settlement in accordance 
with said settlement option information. 

1 39. A mobile electronic oonrmercesystem according to s 
claim 28, wherein data concerning said electronic 
payment card, said electronic telephone card and 
said electronic ticket belonging to the owner of said 
electronic wallet, and data processed k>y said cen- 
tral processing unit of said electronic wallet are io 
stored in said second storage means for said elec- 
tronic wallet or in said user information storage 
means for said service providing means; wherein 
said data are managed by descrbing. in said sec- 
orxi storage nieans tor said electronic wallet, identi- is 
ftcation information for said data, and addresses of 
said data in said corresponding storage means; 
wherein, when data at an address in said user infor- 
mation storage means are to be processed, said 
electronic wallet generates and then transmits, to so 
said service providing means, a remote access 
request message requesting address data; wherein 
said service providing means, upon receiving said 
remote access request message, generates and 
then transmits, to said electronic wallet, a remote ss 
access data message in which said requested data 

are included; and wherein said electronic wallet. 
upon receiving said remote access data message, 
extracts said requested data from said message. 

30 

140. A mobile electronic commerce system according to 
claim 1, wherein said electronic wallet employs a 
ferroelectric nonvolatile memory as storage means. 

141. A nrxibile electronic commerce system accordng to as 
claim 10. wherein a ferroelectric nonvolatile mem- 
ory is employed as storage means for said elec- 
tronic payment card settlement means. 

142. A printed matter according to claim 63. wherein 4o 
said object is one whereon or wherein electronic 
payment card installation information, electronic tel- 
ephone card installation information, or electronic 
ticket installation information is printed or engraved 

in a form readable by a person or reading means. 4s 

143. A printed matter according to claim 142. wherein a 
coating is applied to a portion of said object wher- 
eon or wherein said electronic payment card instal- 
lation information, said electronic telephone card so 
installation information or said electronic ticket 
installation information is printed or engraved in 
order to disable the reading of said ^ectronic pay- 
ment card installation information, said electronic 
tel^one card installation information or said elec- ss 
tronic tick^ installation information, and wherein 
said coating is removable. 


144. A printed matter according to claim 1 42. wherein, to 
prevent holographic counterfeiting, a micro-charac- 
ter or a micro-pattern is printed on or etched in said 
object. 

145. A recading medium according to claim 64, on 
which electronic payment card Installation informa- 
tion, electronic telephone card installation informa- 
tion, or electronic ticket Installation information Is 
recorded using a form that is readable by record- 
ing/reproduction means. 

146. A recording medium, on which a control program 
for said central processing unit of said electronic 
wallet defined in claim 28 is stored in a form reada- 
ble by a conrputer. 

147. A recording medium, on which a control program 
for said central processing unit of said electronic 
payment card settiement means defined in claim 29 
is recorded in a form readable by a computer. 

148. A recording medium, on which a control program 
for said central processing unit of said electronic 
telephone card settlement means defined in claim 
32 is recorded in a form readable by a computer. 

149. A recording medium, on which a control program 
for said central processing unit of sakj electronic 
ticket examination mear% defined in claim 33 is 
recorded in a form readable tyy a computer. 

150. A recording medium, on which a processing pro- 
gram for said computer system of said service pro- 
viding means defined in claim 34 is recorded in a 
fomi readable by a computer. 

151 .A recording medium, on which a processing pro- 
gram for said computer system of said settlement 
processing means defined in claim 35 is recorded 
in a form readable by a computer. 

152. A recording medium, on which a processing pro- 
gram for said computer system of said payment 
card issuing means defined in claim 36 is recorded 
In a form readable by a computer. 

153. A recording medium, on which a processing pro- 
gram for said computer system of said telephone 
card issuing means defined in daim 37 is recorded 
in a form readable by a computer. 

154. A recording medium, on which a processing pro- 
gram for said computer system of said ticket issuing 
means defined in daim 38 is recorded in a form 
readable by a computer 

155. An electronic wallet used for a nr>obile electronic 
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commerce system for paying, via wireless commu- 
nication means, a required amount from said elec- 
tronic wallet that includes said wireless 
communication means arxj for receiving a product 
or a service, or a required permission, from a sup- 5 
ply side, said electronic wallet comprising: 

input means for entering a numerical value and 
for performing a selectbn operation; 
a central processing unit for generating data to 10 
be transmitted via said wireless communication 
means, and for processing data received via 
said wireless oonvnunication means: 
first storage means for storing a control pro- 
gram for controlling an operation performed by 15 
said central processing unit; 
d^tay means for displaying data processed by 
said central processing unit: 
second storage means for storing said data 
processed by said central processing unit, and 20 
an electronic negotiable card received through 
said wireless communication means: and 
third storage means for storing identification 
information and auttx}rization information for 
the user of said electronic wallet. 2s 
wherein for candying, said third storage nr>eans 
is detachable from said electronic wallet 
wherein, when said third storage means is 
removed from said electronic wallet said elec- 
tronic negotiable card stored in said second 30 
storage means is erased, and 
wherein, when said third storage means is 
attached to said electronic wallet, said elec- 
tronic wallet communicates with said service 
providing means via said wireless communica- 35 
tion means, and receives said electronic nego- 
tiable card that said user of said electronic 
wallet owns arxi stores said electronic negotia- 
ble card in said second storage means. 

40 

156^ electronic wallet, used for a mobile electi'onic 
commerce system for paying, via wireless convnu- 
nication means, a required amount from said elec- 
tronic wallet that includes said wireless 
communication means and for receiving a product 4S 
or a service, or a required permission, from a sup- 
ply side, said electronic wallet comprising: 

input means for entering a numerical value and 

for performing a selectfon operation; so 

a central processing unit for generating data to 

be transmitted via said wireless communication 

means, arxj for processing data received via 

said wireless communication means; 

first storage means for storing a control pro- 55 

gram for controlling an operation performed by 

said central processing unit: 

display means for displaying data processed by 


said central processing unit; 
second storage means for storing said data 
processed by said cental processing unit; and 
third storage means for storing an electronic 
negotiable card received via said wireless com- 
munication means. 

wherein for carrying, said third storage means 
is detachable from said electronic wallet. 

157. An electronic wallet used for a mobile electronic 
commerce system for paying, via wireless commu- 
nication means, a required amount from said elec- 
tronic wallet that includes said wireless 
communication means and for receiving a product 
or a service, or a required permission, from a sup- 
ply side, said electronic wallet comprising: 

input means for entering a numerical value cind 
for performing a selection operation; 
a central processing unit for generating data to 
be transmitted via said wireless communication 
means, and for processing data received via 
said wireless communication means; 
first storage means for staing a control pro- 
gram for controlling an operation performed by 
said central processing unit; 
display means for displaying data processed by 
said central processing unit; 
second storage means for storing said data 
processed by said central processing unit; and 
IC card reading/writing means, 
wherein said electronic negotiable card 
received via said wireless communication 
means is staed in an IC card that is loaded in 
said IC card reading/writing means. 

158. An electronic wallet comprising: 

wireless communication means; 
means for installing a program for an electronic 
negotiable card obtained from a predetermined 
agency via said wireless communication 
means; and 

means for. in order to receive a product or a 
service from a seller or to obtain a permission, 
employing said electronic negotiable card with 
said wireless means in accordance with said 
program tor said electronic negotiable card. 

159. An electronic wallet according to daim 158. 
wfierein an inherent private key for providing a dig- 
ital signature for data to be transmitted to said seller 
is included in said program for said electronic nego- 
tiable card, so that said electronic negotiatsle card is 
enptoyed by means provided for employing said 
electronic negotiable card. 

160. An electronic wallet according to claim 158, further 
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comprising: 

means for. when said installation means 
receives a modification instruction message 
from said predetermined agency instructing a 5 
change to said program for said electronic 
negotiable card, changing, in accordance with 
said . modification instruction message, said 
program fa said negotiable card that Is 
Installed. io 

161 .An electronic wallet according to claim 158. further 
corrprising: 

means for, when a modification notification is 
message for the changing of the contents of 
said program for said electronic negotiable 
card is received from said predetermined 
agency, generating a reaction selection mes- 
sage indicating that the modification of the con- 20 
tents of said program is accepted: and 
means for. when said installation means 
receives a modification instruction message 
from said predetermined agency instructing the 
changing of said program for said electronic 26 
negotiable card, changing in accordance with 
said modification Instruction message said pro- 
gram for said negotiable card that is installed. 


162. An electronic wallet according to daim 158, further 
comprising: 


30 


means for. when a modification notification 
message that the contents of said electronic 
negotiable card is to be dianged is received 35 
from said predetermined agency, generating a 
reaction selection message requesting a 
refund process for saxd electronic negotiable 
card, and for transmitting said reaction selec- 
tion message to said predetermined agency: 40 
and 

means for, when a refund receipt message is 
received from said predetermined agency indi- 
cating the termination of said refund process, 
deleting said program for said negotiable card 45 
that is installed. 

163. An electronic wallet according to claim 158. 
wherein said program for said negotiable card is a 
coupon ticket that has at least two functions for a so 
payment card, a telephone card and a ticket. 

164. A seller terminal conr^ising: 

wireless communication means: 55 
means fa installing, from a predetermined 
agency, a program module that defines a set- 
tlement process performed by a seller when an 


electronic negotiable card is used: and 
means for. in accordance with said program 
module, communicating with an electronic wal- 
let via said wireless communication means arxl 
- - for performing~said settiement process fa said 
seller when said electronic negotiable card is 
employed. 

165. An autorTYatic vending machine comprising: 

wireless communication means; 
means fa installing, from a predetermined 
agency, a program module that defines a set- 
tlement process perfamed by said automatic 
vending machine when an electronic negotia- 
t>le card is used: 

means for. in accordance with said program 
module, communicating with an electronic wal- 
let via said wireless communicatun means and 
for performing said settiement process fa said 
automatic vending machine when said elec- 
tronic negotiable card is employed: and 
means for providing a product or a servrce 
when sakJ settiement process fa said auto- 
matk: vending machine has been completed. 

166. A call switching center machine comprising: 

wireless communication means: 
means for installing, from a predetermined 
agency, a program module that defines a set- 
tlement process performed by saki call switch- 
ing center machine when an electronic 
negotiable card is used; 
means for. in accordance with said program 
module, communicating with an electronic wal- 
let via said wireless communicatbn means and 
for perfonnng said settiement process for said 
call witching center machine when said elec- 
tronic negotiable card is employed; and 
means for providing a product or a service 
when said settiement process for said call 
switching center machine has t>een completed. 

167. A management machine for a service providing 
agency comprising: 

communk:ation means; 

means for generating a program fa an elec- 
tronic negotiafc)te card in order to install said 
program in an electronic wallet, and fa trans- 
mitting said program for said electronic negoti- 
able card to said electronic wallet by radio via 
said corrvnunication means; and 
means for transmitting to a seller terminal, in 
order to install said program in said seller termi- 
nal, a program module that defines a settie- 
ment process perfamed by a seller when sad 


205 


409 


EP0950 968A1 


410 


program tor said electronic negotiable card is 
employed. 

168. A management machine for a service providing 
agency oomprising: 

communication means; 

means for receiving from an electronic wallet, 
by radio via said communication nrieans, a pur- 
chase order request for a program for an elec- 
tronic negotiable card; 

means for receiving data, concerning a negoti- 
able card that is to t>e issued, from a negotiable 
card issuing agency that issues said electronic 
negotiable card that is ordered by said pur- 
chase order request; 

means for performing, together with a sefttle- 
ment agency, a settlem^ process that accom- 
panies the purchase of said negotiable card; 
means for generating a program for an elec- 
tronic negotiak^e card, based on data that are 
received from said negotieible card issuing 
agency and that concern a negotiable card to 
be Issued, and for transmitting said program for 
said negotiable card to said electronic wallet by 
rsdio via said communication means; and 
means for transmitting to a seller terminal, in 
order to install said program in said seller termi- 
nal, a program module that defines a settle- 
ment process performed by a seller when said 
program for said electronic negotiable card is 
empfoyed. 

169. A management machine for a negotiable card pro- 
gram issuing agency according to daim 168. fur- 
ther comprising: 

means for generating a modification instruction 
message for changing said prog^m fa said 
negotiable card that is installed in said elec- 
tronic wallet; and 

means for transmitting said nKXfificatton 
instruction message to said electronic wallet 
via said communication means. 

170. A management machine for a negotiable card pro- 
gram issinng agency according to daim 168. fur- 
ther comprising: 

means for generating a modification notrfica- 
tion message for the modification of said pro- 
gram for said negotiable card that is installed in 
said electronic wallet; 

means for receiving, from said electronic wal- 
let, a reaction selection message indicating 
said modificalion has been accepted; 
means for. upon receiving said reaction selec- 
tion message, generating a mocfification 


instruction message for changing said program 
for said negotiable card that is installed in said 
electronic wallet; and 

means for transmitting said modification 
s ' instruction^ message to said electronic wallet 

via said communication means. 

171 .A management machine for a negotiable card pro- 
gram issuing agency according to daim 168. fur- 
10 ther comprising: 

means for generating a nxxJification notifica- 
tion message for the nxxiif ication of said pro- 
gram for said negotiable card that is installed in 

15 said electronic wallet; 

means for receiving from said electronic wallet, 
in response to said modification notification, a 
reaction selection message requesting a 
refund for said electronic negotiatsle card; 

20 means for, upon receiving said reaction selec- 

tion message, performing a refund settlement 
process for a predetermined settiement 
agency; 

means for generating a refund receipt mes- 
2s sage indicating that said refund settiement 

process has been completed; and 
means for transmitting said refund receipt mes- 
sage to said electronic wallet via said commu- 
nication means. 

30 

172. A management machine for a service providing 
agency, which transmits, to an electronic wallet, an 
electronic negotiable card program, induding a 
card signature private key, a card certificate, a card 

35 authorization private key and an accounting 
machine authorization private key, and which trans- 
mits to a seller terminal a settlement program, 
induding a card autiiorization pii^lc key that is 
paired witii said card authorization private key and 

40 an accounting machine authorization private key 
that is paired with said accounting machine author- 
ization public key, said management machine com- 
prising: 

45 means for managing, for each negotiable card 

type, the pair comprising said card authoriza- 
tion private key. which differs for each negotia- 
ble card type, and said card authorization 
public key, and the pair oomprising said 

so accounting machine authorization private key 

and said accounting machine autiiorization 
public key; and 

means for, in order to issue a negotiable card, 
generating a card signature private key, which 
55 is inhererrt to said negotiak>le card, and a card 

certificate, and for generating a negotiable card 
by using said card authorization private key. 
which con^esponds to tfie type of said negotia- 
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ble card, and said accounting machine authori- 
zation public key. 

173. A nx3bile electronic commerce system according to 
claim 3. wherein said electronic wallet includes s 
means for generating first identification information 
for identifying a transaction conducted with said 
supply side, and for transmitting said first identifica- 
tion information to said supply side; wherein said 
si4^y side includes means for generating second io 
identification information for identifying a transac- 
tion conducted with said electronic wallet, and for 
transmitting said second identification information 

to said electronic wall^; wherein said electronic 
wallet includes means for generating said electronic is 
check that contains first said information arxl said 
second information; and wherein said supply side 
includes means for generating a receipt that con- 
tains said first identification information and said 
second klentiffoation information. so 

174. A mobile electronic commerce system acoorcfing to 
claim 50. wherein saki first electronic wallet 
includes nrteans for generating first identification 
information for klentrfying an electronic payment 25 
card transfer process perfornned with sab second 
electronk; wallet, and for transmitting saki first iden- 
tifkation infonmation to sakl second electronic wal- 
let; wherein said second electronic wallet includes 
means for generating second klentification informa- 30 
tion for identifying an electronk; payment card trans- 
fer process performed with sad first electrons 
wallet, and for transmitting sakl second tientrfica- 
tion information to sakJ first electronk: wallet: 
wherein sad first electronk; wallet includes means 3S 
for generating saki payment card transfer certificate 
message that contains said first kierrtificatfon infor- 
mation and sakI second identificatk)n information; 
and wherein sad second electronic wallet includes 
means for generating sad payment card receipt 40 
message that contains said first dentification infor- 
mation and said second dentification information. 

175. A mobile electronic commerce system according to 
claim 52, wherein said first electronic wallet 4S 
includes means for generating first identification 
information for identifying an electronic telephone 
card transfer process perf6rnf>ed with sad second 
electrons wallet, and for transn^ng sad first iden- 
tifkation information to sad second electronic wal- so 
let; wherein sad second electronic wallet includes 
means for generating second dentification informa- 
tion tor dentifying an electronic telephone card 
transfer process perfomied with said first electronk: 
wallet, and for transmitting sad second dentifk:a- ss 
tion information to sad first electronk: wallet; 
wherein sad first electronk: wallet includes means 

for generating sad telephone card transfer certifi- 


cate message tiiat contains sad first identification 
infomiation and sad second identification informa- 
tion; and wherein said second electronic wallet 
includes means for generating said telephone card 

receipt message that contains sad first denttfk:a- 

tion information and said second identif icatdn infor- 
mation. 

176. A mobile electronic commerce system according to 
claim 54. wherein said first electronic wallet 
includes means for generating first identification 
information for dentifying an electronk: ticket trans- 
fer process performed with sad second electronic 
wallet, and for transmitting sad first dentification 
inforn^dn to said second electronic wallet; 
wherein sad second electironk: wallet includes 
means for generating second dentif icatdn informa- 
tion for dentifying an electi-onic ticket transfer proc- 
ess performed with said first electronic wallet and 
for transmitting said second dentifk;ation informa- 
tion to sad first electronic wallet; wherein said first 
electronic wallet includes means for generating sad 
ticket transfer certificate message that contains 
said first dentification information and sad second 
dentification Information; and wherein sad secorxl 
electronk; wallet includes means for generating sad 
ticket receipt message that contains sad first den- 
tifk:ation information and said second dentification 
infomnatdn. 

177. A mobile electronic commerce system according to 
dalm 54, wherein said first electronic wallet 
includes means for generating first dentification 
informatdn for derrtifying a negotiat)le card transfer 
process performed with said second electronic wal- 
let, and for transmitting sad first identificatdn infor- 
mation to said second electi'onic wallet; wherein 
said second electronic wallet includes means for 
generating second identification information for 
dentifying a negotiable card transfer process per- 
formed with said first electronic wallet, and for 
transmitting sad second identification information 
to sad first electronic wallet; wherein said first elec- 
tronic wallet includes means tor generating sad 
payment card transfer certificate message that con- 
tains sad frst identification information and sad 
second dentification information; and wherein sad 
second electronic wallet includes means for gener- 
ating sad payment card receipt message that con- 
tains sad fo'St identification information and sad 
second dentifdation information. 

178. A recording medium on which is stored a program 
for an electronic payment card used by an elec- 
tronic wallet in a mobile electronic commerce sys- 
tem for paying, via wireless communication means, 
a required amount from said electronk; wallet that 
includes said wireless communication means, and 
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for receiving a product or a service, or a required 
permission, from a supply side, and on which said 
program for said electronic payment card is so 
stored as to be readat^le by a oomputer, wherein 
said electronic payment card includes a paymerit 5 
card program, presented card information that 
describes the contents of said electronic payment 
card that is issued, and a card certificate for proving 
that said electronic payment card is real; wherein 
said payment card program further includes man- 10 
agement information for the status of said elec- 
tronic payment card, and payment card program 
data that specifies the operations performed by 
said electronic payment card; and wherein said pre- 
sented card information is accompanied by the dig- 15 
rtal signature of the owner of the service providing 
means. 

179^ recorcfing medium according to claim 176, 
wherein said payment card program includes a card 20 
signature private key that is used for a digital signa- 
tire for an electronic payment card, and wherein 
said card certificate is a public key certificate that 
verifies a card signature public key tiiat Is paired 
with said card signature private key 25 

'iBOA reoordng medium according to claim 178. 
wherein a clearing program module for saki elec- 
tronic payment card includes two cryptographic 
keys, an accounting machine authorization private 30 
key and a card authorization public key; and 
wherein said paymerrt card program Includes an 
accounting machine authorization public key that is 
paired with saki accounting machine authorization 
private key, and a card authorizatbn private key 35 
that is paired wrtii saki card autiiorization public 
key 

181 .A recorcfing medium according to claim 178, 
whereof saki payment card program data includes 40 
a transactkm module program, for specifying tiie 
procedures employed for message data that are 
exchanged by saki electronic wallet and electronic 
payment card settiement means, a display module 
program, for specifying a display for an electronic 4S 
payment card, and representative component infor- 
mation for an electronic payment card; and 
whereof, in accordance with said transaction mod- 
ule program for saki electronic payment card, a 
central processing unit in said electronic wallet so 
processes saki message data that are exchanged 
wrtii said electronic payment card clearing means, 
and displays said representative component Infor- 
mation in accordarK^ with saki display nrxxiule pro- 
gram for sad electronic paymerrt card, so that said ss 
electronic payment card is displayed on display 
means of said electronic wallet. 


182. A recording medium on which is stored a program 
for a negotiable card used by an electronic wallet in 
a mobile electronic commerce system for paying, 
via wireless communication means, a required 

- amount from saki eiectronk; wallet tfiat includes 
said wireless communication means, and for 
receiving a product or a service, or a required per- 
missk)n. from a supply side, and on whk:h saki pro- 
gram for said negotiat>le card is so stored as to be 
readat>le by a computer, wherein said negotiable 
card includes a negotiable card program, presented 
card information that describes tiie contents of saki 
negotiable card that is issued, and a card certificate 
for proving that said negotiable card is authentk:; 
wherein saki negotiable card program further 
includes management information for the status of 
sad negotiable card, and negotiable card program 
data ttiat specifies the operations performed by 
sad negotiable card; and wherein sad presented 
card information is accompanied by the digital sig- 
nature of the owner of the sen/ice provding mear«. 

183. A recording medium according to daim 182. 
wt)erein sad eiectronk; negotiable card program 
includes a card signature private key tiiat is used for 
a digital signature for an electronic negotiable card, 
and wherein sad card certrf date is a public key cer- 
tificate tiiat verifies a card signature publk; key that 
Is paired with said card signature private key. 

184. A recading medium according to daim 182, 
wtierein a dearing program rrxdule for said elec- 
tronic negotiable card indudes two cryptographic 
keys, an accounting machine authorization private 
key and a card authorization put>lic key; and 
wherein sad negotiable card program indudes an 
accounting machine authorization public key that is 
paired witii said accounting machine autiiorization 
private key and a card authorization private key 
that is paired with sad card autiiorization public 
key 

185. A recading medium according to daim 178, 
whereof sad negotiable card program data 
indudes a tiansaction module program, for specify- 
ing tiie procedures employed for message data that 
are exchanged by sad electronic wallet and elec- 
tronic negotiable card settlement means, a display 
module program, for specifying a display for an 
electronic negotiable card, and representative com- 
ponent information for an electronic negotiat)le 
card; and whereof, in accordance with sad transac- 
tdn module program for sad electronic negotiable 
card, a central processing unit in sad elecb^onic 
wallet processes said message data that are 
exchanged witti sad electronic negotiable card 
dearing means, and displays said representative 
component information in accordance with said dis- 
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play module program for said electronic negotiable 
card, so that said electronic negotiable card is dis- 
played on display mearts of said electronic wallet 

186. A recording medium on which is stored a program s 
for an electronic telephone card used by an elec- 
tronic wallet in a mobile electronic commerce sys- 
tem for paying, via wireless communication means, 

a required amount from said electronic wallet that 
Includes said wireless communication means, arxl io 
for receiving a product or a service, or a required 
pemnission, from a supply side, and on which said 
program for said electronic telephone card is so 
stored as to be readable by a computer, wherein 
said electronic telephone card indudes a telephone 75 
card program, presented card information that 
descnbes the cont^ts of said electronic telephone 
card that is issued, and a card certificate for proving 
that said electronic telephone card is authentic: 
wherein said telephone card program further so 
includes management infbrnrmtion for the status of 
said electronic telephone card, and telephone card 
program data that specifies the operations per- 
formed by said electronic telephone card; and 
wherein said presented card information is aocom- 26 
panied by the digital signature of the owner of the 
service providing means. 

187. A recording medium on which is stored a program 

for an electronic telephone card used by an elec- so 
tronic wallet in a nrx^bile electronic commerce sys- 
tem for paying, via wireless communication means, 
a required amount from said electronic wallet that 
includes said wireless communication means, arxf 
for receiving a product or a service, or a required 35 
permission, from a supply side, and on which said 
program for said electronic telephone card is so 
stored as to be readable by a compute-, wherein 
said telephone card pro-am includes a card signa- 
ture private Key that is used for a digital signature 4o 
for an electronic tel^one card, and wherein said 
card celificate is a public key certificate that veri- 
fies a card signature public key that is paired with 
said card signature private key. 

45 

188. A recording medium on which is stored a program 
for an electronic telephone card used k>y an elec- 
tronic wallet in a mdbWe electronic commerce sys- 
tem for paying, via wireless communication means, 

a required amount from said electronic wallet that so 
includes said wireless communication means, and 
for receiving a product or a service, or a required 
pemrission, from a supply side, and on which said 
program for said electronic telephone card is so 
stored as to k>e readable by a computer, whereof, in 55 
accordance with said transaction module program 
for said electronic telephone card, a central 
processing unit in said electronic wallet processes 


said message data that are exchanged with said 
electronic telephone card clearing means, and dis- 
plays said representative component information in 
accordance with said display nrxxjule program for 
' ^satd electronic telephone* card, so that said elec- 
tronic telephone card is displayed on display means 
of said electronic wallet, and whereof said tele- 
phone card program data includes a transaction 
module program, for specifying the procedures 
employed for message data that are exchanged by 
said electronic wallet and electronic telephone card 
settlemerrt means, a display module program, for 
specifying a display for an electronic telephone 
card, and representative component information for 
an electronic telephone card. 

189. A recortling medium on which is stored a program 
for an electronic ticket used by an electronic wallet 
in a mobile electronic commerce system for paying, 
via wireless communication means, a required 
amount from said electronic wallet that indudes 
said wireless comnrtunicalion means, and for 
receiving a product or a service, or a required per- 
mission, from a supply side, and on which said pro- 
gram for said electronic ticket is so stored as to be 
readable by a computer, wherein said electronic 
ticket includes a ticket program, presented card 
information that describes the contents of said elec- 
tronic ticket that is issued, and a card certificate for 
proving that said electronic ticket is authentic; 
wherein said ticket program further includes man- 
agement information for the status of said elec- 
tronic ticket, and ticket program data that specifies 
the operations performed by said electronic ticket; 
and wherein said presented card information is 
accompanied by the digital signature of the owner 
of the service providing means. 

190. A recording medium according to daim 189. 
wherein said tfoket program includes a ticket signa- 
ture private key that is used for a digital signature 
for an electronic tidtet, and wherein said ticket cer- 
tif foate is a public key certificate that verifies a ticket 
signature public key that is paired with said ticket 
signature private key. 

191 .A recording medium according to daim 189, 
wherein an examination program module for said 
electronic ticket includes two cryptographic keys, a 
gate autiiorization private key and a ticket authori- 
zation public key; and wherein said ticket program 
includes a gate authorization public key that is 
paired with said gate authorization private key. and 
a ticket authorizatbn private key that is paired with 
said ticket authorization public key. 

192. A recording medium according to daim 189, 
whereof said ticket program data includes a trans- 


209 


417 


EP0950 968 A1 


action module program, for specifying the proce- 
dures employed tor message data that are 
exchanged by said electronic wallet and electronic 
ticket exanrinaticn means, a display module pro- 
gram, lor specifying a display for an electronic pay- 5 
ment card, and representative conponertt 
information for an electronic ticket; and whereof, in 
accordance with said transaction module program 
for said electronic ticket a central processing unit in 
said electronic wallet processes said message data w 
that are exchanged with said electronic ticket exam- 
ination means, and displays said representative 
component information in accordance with ssiid dis- 
play module program for said electronic ticket so 
that said electronic ticket Is displayed on display 75 
means of said electronic wallet. 

193^ recording medium on which a program for a pay- 
ment card, which is used for electronic commerce 
that employs an electronic wallet, is so stored as to 20 
be readable by a computer, and whereon as infor- 
mation indicating the contents of a negotiable card, 
included for said payment card, is ASCII infbnma- 
tion for which tag information that describes the 
information type is addrtionalty provided. 25 

194^ recording medium on which a program for a tele- 
phone card, which is used for electronic commerce 
that employs an electronic wallet, is so stored as to 
be readable by a computer, and whereon as infor- 3o 
mation indicating the contents of an electronic tele- 
phone card, included for said telephone card, is 
ASCII information for which tag information that 
desaibes the information type is additionally pro- 
vided. 35 

195.A recording medium on which a program for a 
ticket which is used for electronic commerce that 
employs an electronic wallet, is so stored as to be 
readable by a oonputer. and v^ereon as informa- 40 
tfon indicating the contents of an electronic ticket 
included for said ticket, is ASCII information for 
which tag information thatdescrfoes the information 
type is additionally provided. 
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